git-workflow
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a version manifest from the author's GitHub repository to perform automated update checks and version notifications.
- [COMMAND_EXECUTION]: Utilizes Git and GitHub CLI tools to gather repository metadata such as branch names, commit history, and merge settings.
- [PROMPT_INJECTION]: Evaluates remote JSON content to determine version status messages, serving as an indirect prompt injection surface. Ingestion points: manifest.json from GitHub. Boundary markers: Not present. Capability inventory: Git/GitHub CLI read operations and writing to the local AGENTS.md file. Sanitization: The agent interprets structured JSON fields for user notification logic.
Audit Metadata