fix-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from local files containing git conflict markers and external pull request descriptions, which could contain malicious instructions.
- Ingestion points: Source files containing git conflict markers (detected via
git status); pull request descriptions (checked for stale paths/SHAs). - Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are provided in the workflow.
- Capability inventory: The skill is authorized to run compilation tools, linters, test suites, package manager lockfile regeneration, and
gitcommands (git stage). - Sanitization: The instructions do not specify any sanitization or validation of the text found within conflict markers or PR descriptions before processing.
Audit Metadata