git-onboarding-workflow
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill recommends executing standard local CLI commands such as
gitandgh(GitHub CLI) to manage branches, commits, and pull requests. These commands are appropriate for the skill's stated purpose. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted output from local git commands.
- Ingestion points: Data from
git branch,git status, andgit logis used to determine workflow guidance. - Boundary markers: No delimiters or protective instructions are used to distinguish untrusted git output from the skill's analysis logic.
- Capability inventory: The skill suggests shell commands for the user to execute based on its analysis.
- Sanitization: The skill does not perform any sanitization or validation of the text returned by the git commands.
Audit Metadata