fix-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes files containing merge conflict markers, which can serve as an ingestion point for untrusted instructions. * Ingestion points: Conflicting files detected via git status in SKILL.md. * Boundary markers: The skill does not define markers to isolate or ignore instructions within the conflict data. * Capability inventory: The skill performs compilation, linting, and testing (SKILL.md). * Sanitization: No sanitization of conflict content is performed before execution.
- [DYNAMIC_EXECUTION]: The skill executes local build and test commands to validate the resolved code. This is the primary function of the skill, but it involves executing code that has been modified during the resolution process.
Audit Metadata