split-branch
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple git and CLI commands (gh, glab) to manage repository branches and pull requests. These operations are performed using local scripts that properly quote variables to prevent command injection.
- [INDIRECT_PROMPT_INJECTION]: The skill processes file paths and directory names from the local repository diff.
- Ingestion points:
analyze.shcollects file paths viagit diff --numstat. - Boundary markers: Findings are presented to the agent in a structured JSON format.
- Capability inventory: The agent can execute git branch manipulation and PR management commands.
- Sanitization: The script uses
jqto escape file paths for JSON output, mitigating risk from malicious filenames. - [SAFE]: No malicious patterns such as credential exfiltration, persistence, or remote code execution were found. The skill demonstrates defensive coding by using the
--separator in git commands to ensure filenames are not treated as flags.
Audit Metadata