git-workflow
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill provides numerous bash commands for Git operations (e.g., git commit, git push, git rebase). These are standard, well-documented commands for the intended purpose of version control and do not exhibit malicious intent.
- [DATA_EXFILTRATION] (SAFE): While the skill includes commands that interact with remote repositories (git push, git pull, git fetch), these are the primary functions of Git. No hardcoded credentials, sensitive file access (like SSH keys), or hidden network requests were identified.
- [PROMPT_INJECTION] (SAFE): The content is purely instructional and does not contain any phrases attempting to override agent behavior, bypass safety filters, or extract system prompts.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill demonstrates surfaces where untrusted data could be processed, such as viewing logs (git log) or diffs (git diff) from external sources. However, the skill provides instructions for human-mediated or agent-assisted workflows rather than autonomous execution based on that data. Mandatory Evidence Chain: 1. Ingestion points: Git log/status/diff outputs; 2. Boundary markers: Absent; 3. Capability inventory: Local git command execution; 4. Sanitization: Relies on default git output handling.
Audit Metadata