skills/openai/symphony/pull/Gen Agent Trust Hub

pull

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Command Execution]: The skill uses several standard Git commands (e.g., git fetch, git pull, git merge, git config) to synchronize branches and manage configurations. These operations are restricted to the local repository and its configured remotes, representing standard developer tooling behavior.
  • [Indirect Prompt Injection Surface]: The skill is designed to process and resolve merge conflicts within code files. This involves reading content from conflict markers (e.g., <<<<<<<, |||||||, =======, >>>>>>>).
  • Ingestion points: Conflicted files read via git diff and file system access.
  • Boundary markers: The instructions guide the agent to use standard Git conflict markers to identify changes.
  • Capability inventory: The agent can perform file writes and execute Git commands.
  • Sanitization: The skill relies on the agent's ability to semantically analyze code changes and follow the provided 'Conflict Resolution Guidance' to maintain code integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 05:48 PM