merge-change
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates complex git workflows by executing local shell scripts such as .guardrails/scripts/merge-preflight.sh and task-worktree.sh (referenced in SKILL.md). These scripts are used for environment checks and managing git worktrees.
- [INDIRECT_PROMPT_INJECTION]: The skill reads external data from the repository's git history and branch names to manage the merge process, representing a potential attack surface. 1. Ingestion points: Git commit messages (searched via git rev-list in SKILL.md), branch names, and git worktree list output. 2. Boundary markers: The skill relies on specific grep patterns like '^review dispatched$' to identify relevant states in the history. 3. Capability inventory: Capabilities include file writes (git commit), network operations (git fetch), and shell command execution (sh .guardrails/scripts/...) across SKILL.md and reference files. 4. Sanitization: The skill does not explicitly sanitize git-derived strings before they are used in shell commands, relying instead on standard shell handling.
Audit Metadata