git-rebase-squash

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands and git subcommands such as git rebase, git push, and git merge-base to manipulate repository history. It utilizes the GIT_SEQUENCE_EDITOR environment variable to automate the rebase process non-interactively.
  • [DATA_EXPOSURE]: The skill reads and displays git commit logs and repository metadata to help the user plan the rebase. This involves processing potentially sensitive information from the repository history.
  • [EXTERNAL_DOWNLOADS]: The skill executes git fetch origin, which initiates a connection to the remote repository. This is standard behavior for git operations involving synchronization with a remote server.
  • [PROMPT_INJECTION]: The skill processes untrusted data from the repository (commit messages) and interpolates it into a rebase plan that is subsequently executed. 1. Ingestion points: Commit messages are read via git log (SKILL.md). 2. Boundary markers: None; the rebase plan file is a raw text file without specific delimiters for commit messages. 3. Capability inventory: git rebase (SKILL.md) is executed, which can process exec commands within the rebase plan. 4. Sanitization: No sanitization or escaping is performed on commit messages before they are included in the rebase plan template.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 03:20 AM