finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard development and version control commands, including git operations and GitHub CLI (gh) commands for pull request management. These are legitimate and necessary for the skill's described functionality.- [COMMAND_EXECUTION]: Runs local test suites using common runners like npm, cargo, pytest, and go. This is a controlled execution of project-specific tests required for verification before merging.- [COMMAND_EXECUTION]: Employs quoted shell heredocs (<<'EOF') when generating pull request content. This technique prevents the shell from expanding variables or executing code embedded in the branch names or commit messages, effectively neutralizing potential injection attacks.- [SAFE]: Implements a human-in-the-loop safety check for destructive actions by requiring the user to explicitly type 'discard' before deleting any git branches or worktrees.- [SAFE]: No suspicious network activity, data exfiltration patterns, or obfuscation techniques were identified within the skill's instructions.
Audit Metadata