resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions. * Ingestion points: Step 2 in SKILL.md instructs the agent to read commit messages, pull requests, and issues. * Boundary markers: The instructions do not define delimiters or warnings to differentiate between data and instructions. * Capability inventory: Step 4 and 5 involve executing project-specific commands (tests, typecheck, format) and git operations. * Sanitization: No sanitization or validation of the ingested data is mentioned.
- [COMMAND_EXECUTION]: Step 4 of the skill involves discovering and running the project's automated checks, which typically involves executing shell commands for testing, linting, and formatting. This is an expected capability for the skill's primary purpose of resolving code conflicts.
Audit Metadata