resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The instructions require the agent to ingest data from external sources such as commit messages, pull request descriptions, and issue trackers.
- Ingestion points: SKILL.md Step 2 specifies reading commit messages, PRs, and issues/tickets.
- Boundary markers: None present. There are no delimiters or warnings to treat embedded content as data only.
- Capability inventory: The skill implies the use of git CLI tools and execution of project-specific automated checks (tests, linters, formatters).
- Sanitization: No sanitization or validation logic is defined for the external data being processed.
Audit Metadata