resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection by processing untrusted external data.
- Ingestion points: The agent is instructed to read git history, commit messages, PRs, and issue trackers (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the git metadata.
- Capability inventory: The skill grants the agent the ability to execute arbitrary project-specific automated checks (tests, formatters, typecheck) and perform git operations.
- Sanitization: No sanitization or validation of the external content is performed before processing.
Audit Metadata