create-branch
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard
gitandgh(GitHub) CLI commands to perform operations such as retrieving user info, checking repository status, and switching branches. These actions are routine for development tasks and are performed locally or via official APIs.\n- [PROMPT_INJECTION]: The skill implements strict rules for branch name generation, requiring lowercase, kebab-case, and restricting characters to ASCII letters, digits, and hyphens. This ensures that user-provided descriptions or repository content (fromgit diff) cannot be used to inject malicious shell metacharacters or override agent behavior.\n- [DATA_EXFILTRATION]: Local source code changes are inspected viagit diffto provide context for branch naming. This information is processed within the agent's context for the primary task and is not transmitted to any unauthorized or untrusted external domains.
Audit Metadata