git-rebase-squash
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands and git subcommands such as
git rebase,git push, andgit merge-baseto manipulate repository history. It utilizes theGIT_SEQUENCE_EDITORenvironment variable to automate the rebase process non-interactively. - [DATA_EXPOSURE]: The skill reads and displays git commit logs and repository metadata to help the user plan the rebase. This involves processing potentially sensitive information from the repository history.
- [EXTERNAL_DOWNLOADS]: The skill executes
git fetch origin, which initiates a connection to the remote repository. This is standard behavior for git operations involving synchronization with a remote server. - [PROMPT_INJECTION]: The skill processes untrusted data from the repository (commit messages) and interpolates it into a rebase plan that is subsequently executed. 1. Ingestion points: Commit messages are read via
git log(SKILL.md). 2. Boundary markers: None; the rebase plan file is a raw text file without specific delimiters for commit messages. 3. Capability inventory:git rebase(SKILL.md) is executed, which can processexeccommands within the rebase plan. 4. Sanitization: No sanitization or escaping is performed on commit messages before they are included in the rebase plan template.
Audit Metadata