create-branch
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local git commands including
git diff,git status,git remote, andgit checkout. These operations are standard for a development tool intended to manage local version control branches. - [INDIRECT_PROMPT_INJECTION]: The skill derives branch names from external inputs such as user-provided arguments and local diff content.
- Ingestion points: Processed data from
$ARGUMENTSandgit diffoutput (SKILL.md). - Boundary markers: Absent; the skill does not use specific delimiters to isolate these inputs.
- Capability inventory: Local execution of
git checkout -b <branch-name>(SKILL.md). - Sanitization: The instructions require the agent to generate kebab-case, ASCII-only strings for branch names, which effectively sanitizes the data before it is used as a command argument.
Audit Metadata