git-advanced-workflows
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [Command Execution] (SAFE): The skill includes standard Git commands and instructions for running local tests (e.g.,
npm test,git bisect run). These are standard developer practices and are necessary for the skill's primary purpose. - [Indirect Prompt Injection] (LOW): The skill inherently interacts with external data that could contain malicious instructions. 1. Ingestion points: Git commit messages, branch names, and reflog history processed during rebasing and bisecting. 2. Boundary markers: Absent; there are no delimiters or warnings for the agent to ignore instructions within the Git history. 3. Capability inventory: Can execute the
gitCLI and potentially run shell scripts or test suites viabisect run. 4. Sanitization: No sanitization or verification of Git metadata is performed before the agent processes it.
Audit Metadata