resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted content such as git commit messages, pull request descriptions, and issue trackers to determine the original intent of changes. This creates a surface for indirect prompt injection if an attacker-controlled commit or PR contains malicious instructions.
- Ingestion points: Git history, commit messages, PR descriptions, and issues mentioned in
SKILL.md(Step 2). - Boundary markers: None specified in the instructions.
- Capability inventory: The agent has capabilities to execute shell commands for git operations and project testing.
- Sanitization: None specified.
- [COMMAND_EXECUTION]: The skill instructs the agent to discover and run automated checks locally, such as Larastan, Pest, and Pint (Step 4). This involves executing tools found within the repository context. This is expected behavior for a developer-oriented skill.
Audit Metadata