resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze external data such as pull request descriptions, commit messages, and issue trackers. This data is often user-supplied and could contain malicious instructions designed to influence the agent's behavior during the conflict resolution process (Indirect Prompt Injection).\n
- Ingestion points:
SKILL.md(Step 2: "check the PRs, check original issues/tickets").\n - Capability inventory: The agent is expected to run shell commands for git operations and project-specific testing/formatting tools.\n
- Boundary markers: No specific instructions are provided to the agent to treat external content as untrusted or to use delimiters.\n
- Sanitization: No sanitization steps are defined for the ingested text.\n- [COMMAND_EXECUTION]: The skill instructs the agent to discover and run "automated checks" found within the project environment (Step 4). This pattern relies on the integrity of the local repository's scripts. If the repository is malicious or contains contributed code that hasn't been vetted, running these tests or formatters could result in executing arbitrary malicious code.
Audit Metadata