ultimate-git
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the gh CLI and git commands for repository lifecycle management, including scaffolding, branch protection, and pull request operations. These actions are legitimate and aligned with the skill's stated purpose.
- [SAFE]: The skill references trusted GitHub Actions from official organizations for its CI templates, which is a standard and secure practice.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it processes data from Git history and repository views. 1. Ingestion points: SKILL.md (via git log and gh repo view). 2. Boundary markers: None; the skill does not explicitly delimit external Git data. 3. Capability inventory: SKILL.md (Git and GitHub CLI operations). 4. Sanitization: None; the skill reads Git logs to summarize them for user-driven merge decisions.
Audit Metadata