resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to ingest content from external sources like commit messages and pull request descriptions which may contain malicious instructions.
- Ingestion points: Step 2 in SKILL.md instructions the agent to 'Read the commit messages, check the PRs, check original issues/tickets'.
- Boundary markers: Absent. The instructions do not define how to handle embedded commands within these external data sources.
- Capability inventory: The agent is tasked with modifying source code and executing shell commands for project testing and git operations.
- Sanitization: Absent. The skill does not provide methods for validating or filtering data from external version control metadata.
Audit Metadata