dependency-conflict-resolver
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a process for the agent to ingest and analyze untrusted external data, which creates a surface for indirect prompt injection.
- Ingestion points: The "AI-Assisted Resolution" section explicitly prompts the agent to process content provided by the user in the form of error logs and dependency configurations.
- Boundary markers: The instructions use markdown code blocks as delimiters to separate the external data from the instructions.
- Capability inventory: The skill guides the agent to perform actions such as modifying
package.jsonoverrides, executing package manager installations (npm,yarn,pnpm), and performing file system deletions (rm -rf node_modules). - Sanitization: There are no explicit instructions for the agent to sanitize the ingested logs or to ignore natural language instructions that might be embedded within the provided data strings.
Audit Metadata