resolve-conflict
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Git CLI tools such as git status, git log, git show, and git add to inspect and modify the local repository state.\n- [COMMAND_EXECUTION]: Instructions prompt the agent to dynamically discover and execute arbitrary commands defined in project configuration files like package.json, Makefile, or pyproject.toml to perform linting and type checks.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes untrusted data from the repository context.\n
- Ingestion points: Reads raw conflict markers via git diff, commit messages via git log, and file contents via git show as specified in SKILL.md.\n
- Boundary markers: Absent; the agent is not instructed to ignore potential instructions embedded within the code or commit messages.\n
- Capability inventory: The agent can stage files via git add and execute project-defined scripts found during the Run Lint and Type Check step.\n
- Sanitization: No sanitization or escaping is applied to the content read from the files or the commands extracted from configuration files.
Audit Metadata