resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by instructing the agent to ingest and analyze data from external, untrusted sources such as git history, pull requests, and issue tickets.
- Ingestion points: Git commit messages, pull request content, and issue/ticket descriptions referenced in SKILL.md.
- Boundary markers: No explicit delimiters or boundary markers are instructed to separate external data from agent instructions.
- Capability inventory: The agent is instructed to modify files and execute shell commands (SKILL.md).
- Sanitization: No sanitization or validation steps are provided for the external content being processed.
- [COMMAND_EXECUTION]: The skill directs the agent to discover and run automated project checks, such as type checks, test suites, and formatters. This involves executing arbitrary commands defined within the project repository being analyzed.
Audit Metadata