resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process potentially untrusted external content, such as commit messages, pull request descriptions, and issue tracker content, to understand the intent of conflicting changes.
- Ingestion points: External data sources including commit messages, PRs, and issues are accessed as described in Step 2 of
SKILL.md. - Boundary markers: The instructions lack explicit boundary markers or directives to ignore instructions embedded within the external data sources.
- Capability inventory: The agent is empowered to execute project-specific "automated checks" (Step 4 of
SKILL.md) and perform file system operations via git commands (Step 5). - Sanitization: No sanitization or validation of the external text content is specified before the agent interprets it for decision-making.
Audit Metadata