resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to discover and run local automated checks (tests, formatters, etc.) within the repository. This is a standard development workflow and does not involve remote code execution or unauthorized command injection.
- [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface (Category 8) as it reads external data to determine intent.
- Ingestion points: Git commit messages, pull request descriptions, and source code hunk contents are read from the environment.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat this data as untrusted.
- Capability inventory: The agent can execute git commands and project-specific automated checks.
- Sanitization: There is no evidence of sanitization or filtering of the content read from git history or PRs.
Audit Metadata