dx-devops-conflict-resolve
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development CLI tools including git, sf (Salesforce CLI), and jq to manage repository branches and inspect metadata. These operations are scoped to the local repository and the user's authenticated Salesforce orgs.
- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by processing external deployment error logs to diagnose failures. * Ingestion points: The scripts/diagnose-deploy-failure.sh script reads error text from stdin or files. * Boundary markers: Explicit delimiters are not used, but the script is designed for specific diagnostic output. * Capability inventory: The skill has the ability to perform git checkout, merge, commit, and push operations. * Sanitization: The diagnosis script utilizes strict regular expression matching (restricted to [A-Za-z0-9_]+) when parsing component names from error logs, which effectively prevents the propagation of malicious payloads or command injection from the untrusted error text into shell commands.
Audit Metadata