dyad:pr-rebase
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Git command-line interface to perform essential branch management tasks, including fetching changes, checking remote configurations, and rebasing. These are standard and expected operations for an automation tool designed for version control.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and resolve merge conflicts, which serves as an ingestion point for untrusted data. * Ingestion points: The conflict resolution phase reads the raw content of files with merge conflicts. * Boundary markers: There are no explicit instructions provided to the agent to disregard instructions potentially embedded within the conflicting code. * Capability inventory: The skill utilizes shell command execution (Git) and file system access (reading and writing files). * Sanitization: The skill does not perform any specific sanitization or validation of the code content encountered during conflict resolution.
Audit Metadata