dbk-upstream-conflict
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard git operations such as fetch, merge, and restore, as well as cargo check for Rust projects. These actions are appropriate for the intended purpose of synchronizing branches and resolving conflicts.
- [INDIRECT_PROMPT_INJECTION]: The agent processes external data in the form of code conflicts and changelog entries. Potential risks are mitigated by instructions that mandate user consultation for design-level conflicts and require explicit approval before committing changes.
- [EXTERNAL_DOWNLOADS]: The skill performs git fetch operations to synchronize with remote repositories. This is standard behavior for version control tools and does not involve downloading unverifiable external code.
Audit Metadata