git-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute build, test, and linting commands such as
go build,go test, andgolangci-lintto verify that resolved conflicts do not break the codebase. These are standard development operations used for verification purposes. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from git conflict markers within source files, which represents a potential ingestion point for untrusted instructions.
- Ingestion points: Source files containing git conflict markers during a merge or rebase operation (SKILL.md).
- Boundary markers: The skill relies on standard git conflict markers (
<<<<<<<,=======,>>>>>>>) to identify competing changes. - Capability inventory: The skill has the capability to stage changes (
git add), commit (git commit), and push to a remote repository (git push). - Sanitization: The skill mandates checking for leftover conflict markers using
git diff --checkandgrepbefore staging or committing any changes.
Audit Metadata