create-branch

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local git and shell commands (e.g., git config, gh api, whoami, git checkout) to resolve user identity and manage branches. These commands are standard for the skill's stated purpose of automating git workflows.- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface as it processes external data (diffs and arguments) to derive branch names. 1. Ingestion points: Data enters via git diff, git diff --cached, and $ARGUMENTS as seen in SKILL.md. 2. Boundary markers: There are no specific delimiters or instruction-ignore warnings applied to the ingested diff content. 3. Capability inventory: The skill has the capability to execute shell commands, specifically git checkout -b in SKILL.md. 4. Sanitization: The instructions mandate sanitizing all inputs to lowercase ASCII, digits, and kebab-case before use in the command, which prevents malicious content in the diff from influencing the command structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 03:40 AM