resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process untrusted external data such as git commit messages, pull request descriptions, and issue tickets to understand conflict intent. This data could contain malicious instructions designed to influence the agent's actions during the merge resolution process.
- Ingestion points: Reads git history, conflicting files, commit messages, PR descriptions, and issue/ticket descriptions as specified in steps 1 and 2 of
SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the skill instructions to separate project data from agent instructions.
- Capability inventory: The skill instructs the agent to discover and run automated project checks (e.g., typecheck, tests, format) which involves subprocess execution, and to finalize git operations including staging files and committing changes.
- Sanitization: No explicit sanitization, validation, or escaping of the ingested content is performed before it is processed or used to determine command execution.
Audit Metadata