git-integrate
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Git commands and a local bash script (
scripts/inspect-operation.sh) to perform its primary function of history integration and state inspection. - [COMMAND_EXECUTION]: The helper script
scripts/inspect-operation.shimplements defensive shell programming, including the use ofset -euo pipefailfor error handling, null-delimited processing for file lists to handle special characters safely, and proper argument separation using--forgrepandripgrepcommands. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from Git conflict markers, which constitutes an indirect prompt injection surface. The instructions effectively mitigate this risk by requiring human-in-the-loop verification for all resolutions and strictly forbidding the agent from making autonomous decisions when the intended state is not clear from repository evidence.
- [SAFE]: The skill emphasizes 'hard stops' and safety protocols throughout its workflow, requiring confirmation before mutating history or resolving conflicts, which prevents accidental data loss or unauthorized changes.
Audit Metadata