pull
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution]: The skill uses several standard Git commands (e.g.,
git fetch,git pull,git merge,git config) to synchronize branches and manage configurations. These operations are restricted to the local repository and its configured remotes, representing standard developer tooling behavior. - [Indirect Prompt Injection Surface]: The skill is designed to process and resolve merge conflicts within code files. This involves reading content from conflict markers (e.g.,
<<<<<<<,|||||||,=======,>>>>>>>). - Ingestion points: Conflicted files read via
git diffand file system access. - Boundary markers: The instructions guide the agent to use standard Git conflict markers to identify changes.
- Capability inventory: The agent can perform file writes and execute Git commands.
- Sanitization: The skill relies on the agent's ability to semantically analyze code changes and follow the provided 'Conflict Resolution Guidance' to maintain code integrity.
Audit Metadata