git-resolve-version-conflicts
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local
package.jsonandCHANGELOG.mdfiles which could contain instructions from untrusted sources in a shared repository context. - Ingestion points: File content is read from
packages/*/package.jsonandpackages/*/CHANGELOG.mdfiles using git tools. - Boundary markers: The skill identifies segments using git conflict markers but does not use specific delimiters to prevent the agent from following instructions embedded in the file content.
- Capability inventory: The skill uses
Editto modify files and variousgitcommands to update the repository state. - Sanitization: No explicit sanitization or validation of the text content within the changelog entries is performed before rewriting.
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the git rebase process.
- Evidence: Commands such as
git rebase --continue,git show, andyarn nx format:writeare used to automate the resolution workflow. These commands are consistent with the skill's stated purpose of managing a development environment.
Audit Metadata