pull-changes-resolve-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from the local repository during conflict resolution.
- Ingestion points: The workflow utilizes
git show :2:path,git show :3:path, andgit diffto read file contents and conflict markers from the repository into the agent's context (SKILL.md, Workflow step 3). - Boundary markers: The skill contains explicit instructions to "pause and report" and "obtain user answers before editing," which serves as a human-in-the-loop boundary (SKILL.md, Hard rules 1 and 2).
- Capability inventory: The skill uses the
Shelltool to execute Git commands and theWritetool to apply resolutions to the filesystem (SKILL.md frontmatter). - Sanitization: While no automated sanitization is specified for the ingested content, the requirement for a "Summary table" and "Explicit questions" (SKILL.md, Workflow step 4) ensures that all proposed changes are reviewed by the user before execution.
Audit Metadata