resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to ingest and analyze untrusted data which could be used to influence the agent's decision-making or execution.
- Ingestion points: Conflicting file content, git commit messages, pull request descriptions, and issue/ticket references are all processed by the agent to understand intent (SKILL.md).
- Boundary markers: Not present. The instructions do not provide clear delimiters or guidance for the agent to distinguish between data and instructions when reading external sources.
- Capability inventory: The skill uses file system access (reading history and files) and shell command execution (git commands, running automated tests, typechecks, and formatters) (SKILL.md).
- Sanitization: There is no mention of sanitizing or escaping the data retrieved from git logs or issue trackers before the agent processes it.
Audit Metadata