resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to discover and run automated checks such as typecheckers, tests, and formatters. This results in the execution of local scripts defined within the repository being processed.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it instructs the agent to ingest and analyze potentially untrusted data from git history and external trackers.
- Ingestion points: Git commit messages, Pull Request descriptions, and issue/ticket trackers (SKILL.md, Step 2).
- Boundary markers: Absent. There are no instructions or delimiters provided to help the agent distinguish between data and potentially malicious instructions within commit messages.
- Capability inventory: Shell command execution for git operations, file system writes for resolving conflicts, and execution of repository-defined scripts (Steps 1, 4, and 5).
- Sanitization: Absent. The skill does not specify any filtering or validation for the content read from the git history or PR descriptions.
Audit Metadata