resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze potentially untrusted data from external sources such as commit messages, pull request descriptions, and issue trackers to understand conflict context.
- Ingestion points: SKILL.md Step 2 (commit messages, PRs, issues/tickets).
- Boundary markers: Absent; no explicit instructions are provided to the agent to distinguish between data content and instructions within these sources.
- Capability inventory: The agent is expected to execute terminal commands (git), read files, and run local automated checks (typecheck, tests, format).
- Sanitization: None present; content from external metadata is processed directly by the agent's reasoning engine without filtering.
Audit Metadata