resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to perform standard development operations, including executing git commands and running the repository's automated checks (tests, linters, and formatters).
- [PROMPT_INJECTION]: The skill instructions create an attack surface for indirect prompt injection by directing the agent to ingest and analyze untrusted data from external sources.
- Ingestion points:
SKILL.md(instructions to read commit messages, pull request content, and issue/ticket descriptions). - Boundary markers: Absent. The skill does not provide delimiters or instructions to ignore embedded commands in the processed data.
- Capability inventory:
SKILL.md(capabilities include executing git commands and running project-defined scripts for automated tests). - Sanitization: Absent. The skill does not instruct the agent to sanitize or validate the content retrieved from git history or project management tools.
Audit Metadata