git-resolve-version-conflicts

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local package.json and CHANGELOG.md files which could contain instructions from untrusted sources in a shared repository context.
  • Ingestion points: File content is read from packages/*/package.json and packages/*/CHANGELOG.md files using git tools.
  • Boundary markers: The skill identifies segments using git conflict markers but does not use specific delimiters to prevent the agent from following instructions embedded in the file content.
  • Capability inventory: The skill uses Edit to modify files and various git commands to update the repository state.
  • Sanitization: No explicit sanitization or validation of the text content within the changelog entries is performed before rewriting.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the git rebase process.
  • Evidence: Commands such as git rebase --continue, git show, and yarn nx format:write are used to automate the resolution workflow. These commands are consistent with the skill's stated purpose of managing a development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 10:17 PM