resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it requires the agent to read and interpret untrusted data from external sources.
- Ingestion points: The agent is instructed to read git history, conflicting files, commit messages, and PR content (SKILL.md, steps 1-2).
- Boundary markers: There are no instructions to use delimiters or ignore embedded instructions within the ingested git data.
- Capability inventory: The skill instructs the agent to run automated checks and tests (SKILL.md, step 4). This could lead to the execution of malicious code if an attacker has embedded it within the test suite or build configuration of the repository being merged.
- Sanitization: No sanitization or validation of the external git content is performed before processing.
Audit Metadata