resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to read and interpret data from external sources such as commit messages, Pull Requests, and issues to determine the intent of changes. * Ingestion points: Reads commit messages, PR descriptions, and original issues/tickets as specified in SKILL.md. * Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill body. * Capability inventory: The skill involves executing project-specific automated checks (tests, typecheck, format) and git operations (commit, stage). * Sanitization: No sanitization or validation of the ingested external text is mentioned.
- [COMMAND_EXECUTION]: The skill instructs the agent to discover and run automated checks defined within the project repository. While this is standard for development workflows, it grants the agent execution capabilities based on the local environment's configuration.
Audit Metadata