finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard version control and build tool commands (e.g.,
git,gh,npm,cargo,pytest,go) to manage branch lifecycles. These operations are restricted to the local development environment and the project's configured remote repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes local data such as test execution results and git metadata to guide the user.\n - Ingestion points: Test failure outputs from
npm/cargo/pytest/go testand git branch names (Step 1, Step 4).\n - Boundary markers: Absent for test output display.\n
- Capability inventory: Shell execution for git and development tools.\n
- Sanitization: Absent.\n While this represents a potential injection surface, the risk is minimal as the actions are performed within a trusted local development context and include explicit user confirmation for destructive operations.
Audit Metadata