finishing-a-development-branch

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various shell commands to manage the git lifecycle, including branch switching, merging, and pushing (git checkout, git merge, git push).
  • [COMMAND_EXECUTION]: Automates the creation of pull requests using the GitHub CLI (gh pr create). It uses a quoted heredoc ('EOF') for the PR body, which is a security best practice to prevent shell expansion of the generated content.
  • [COMMAND_EXECUTION]: Executes project-specific test suites (npm test, cargo test, pytest, go test) to ensure code quality before integration.
  • [COMMAND_EXECUTION]: Performs directory-level operations through git worktree management (git worktree remove).
  • [SAFE]: Potentially destructive operations, specifically the force-deletion of branches (git branch -D), are protected by a mandatory manual confirmation step requiring the user to type a specific keyword.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 08:15 AM
Security Audit — agent-trust-hub — finishing-a-development-branch