git-clean-gone-branches
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard Git commands (fetch, branch, worktree) to manage local repository state. It follows best practices by using the
commandutility to bypass shell aliases, ensuring consistent and secure execution.\n- [DATA_EXPOSURE]: No sensitive data, such as credentials or environment variables, is accessed or exfiltrated. The skill only reads Git tracking information to identify branches for deletion.\n- [PROMPT_INJECTION]: The skill processes branch names fromgit branch -vvas untrusted data but implements a mandatory human confirmation step before performing any deletions.\n - Ingestion points:
git branch -vvoutput processed inscripts/clean-gone.\n - Boundary markers: Absent in script output, but mitigated by explicit user confirmation in Step 2.\n
- Capability inventory: Branch and worktree deletion commands in Step 3.\n
- Sanitization: Script uses
sedandawkto isolate the branch name token.
Audit Metadata