create-branch

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard git and gh (GitHub) CLI commands to perform operations such as retrieving user info, checking repository status, and switching branches. These actions are routine for development tasks and are performed locally or via official APIs.\n- [PROMPT_INJECTION]: The skill implements strict rules for branch name generation, requiring lowercase, kebab-case, and restricting characters to ASCII letters, digits, and hyphens. This ensures that user-provided descriptions or repository content (from git diff) cannot be used to inject malicious shell metacharacters or override agent behavior.\n- [DATA_EXFILTRATION]: Local source code changes are inspected via git diff to provide context for branch naming. This information is processed within the agent's context for the primary task and is not transmitted to any unauthorized or untrusted external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 02:09 AM