finishing-a-development-branch
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Command Execution] (SAFE): The skill executes standard development tools (npm, git, gh, pytest) as part of its core functionality. These operations are limited to the local repository context and follow best practices for development workflows.
- [Indirect Prompt Injection] (SAFE): While the skill processes PR titles and descriptions which could originate from untrusted sources, it uses a single-quoted heredoc (EOF) for the GitHub CLI command, which prevents shell expansion or injection during execution.
- [Data Exposure] (SAFE): No sensitive files or credentials are accessed or hardcoded; network operations are limited to standard git push and GitHub PR creation.
Audit Metadata