git-create-branch
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (MEDIUM): The skill defines shell command workflows that interpolate user-provided strings, presenting a risk of command injection if the input is not handled safely by the executing environment.
- Ingestion points: The
<branch-name>and<base-branch>variables defined in the Workflow section of SKILL.md. - Boundary markers: None; the skill does not use delimiters or instructions to ignore embedded control characters in the input variables.
- Capability inventory: The skill calls subprocesses/shell commands including
git status,git branch, andgit checkout. - Sanitization: None; there are no instructions for validating, escaping, or sanitizing the strings provided for the branch name placeholders.
Audit Metadata