git-integrate
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a provided bash script (scripts/inspect-operation.sh) and standard Git CLI tools to interact with the repository. The script correctly uses shell quoting (%q) for file paths and limits output (e.g., sed on todo files) to prevent large data dumps.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it reads and processes external, potentially untrusted data from the Git repository (commit messages, file content, sequencer todos).\n
- Ingestion points: scripts/inspect-operation.sh reads Git metadata files and file contents containing conflict markers via grep or rg.\n
- Boundary markers: The skill does not use specific delimiters but includes instructions to inspect behavior-affecting configuration and require independent verification.\n
- Capability inventory: The skill can execute complex Git commands (rebase, merge, cherry-pick, revert) and modify files in the working tree to resolve conflicts.\n
- Sanitization: There is no evidence of sanitization of content read from files before it is analyzed by the agent.
Audit Metadata