dx-devops-conflict-resolve
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes deployment error logs to identify missing dependencies and categorize failures. If these logs are provided by an untrusted source, they could contain instructions designed to manipulate the agent's diagnosis or recommendations.
- Ingestion points: The
scripts/diagnose-deploy-failure.shscript reads deployment error text from either a file or standard input. - Boundary markers: There are no explicit delimiters or boundary instructions provided to the agent to treat the ingested log data as untrusted content.
- Capability inventory: The skill has the capability to perform various Git operations (merge, commit, push, checkout, and show), execute internal bash scripts, and read local files.
- Sanitization: The diagnosis script utilizes regular expressions to ensure that metadata names extracted from the logs consist only of alphanumeric characters and underscores before they are used in subsequent Git commands.
Audit Metadata