finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to manage Git workflows and run test suites.
- Runs
git,gh,npm,cargo,pytest, andgocommands to automate branch merging and PR creation. - Commands are used as part of a standard development lifecycle and are restricted to common developer tools.
- [PROMPT_INJECTION]: Potential for indirect prompt injection through external test suite outputs.
- Ingestion points: The skill captures and processes output from test commands like
npm test,cargo test,pytest, orgo test. - Boundary markers: Absent. There are no delimiters or specific instructions for the agent to ignore instructions embedded in test results.
- Capability inventory: The skill has the ability to perform file system changes (
git merge,git branch -D,git worktree remove) and network operations (git push,gh pr create). - Sanitization: No sanitization or validation of the test output content is performed before the agent evaluates whether to proceed.
Audit Metadata