resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external data including commit messages, pull request descriptions, and issue trackers to understand conflict context. This ingestion of untrusted data creates a surface for indirect prompt injection, where malicious instructions embedded in the repository history could influence the agent's logic.\n
- Ingestion points: Git history, commit messages, pull requests, and issues (SKILL.md).\n
- Boundary markers: Absent; the agent is not instructed to use delimiters or to ignore instructions found within the ingested data.\n
- Capability inventory: Shell command execution for git operations and project-specific test suites (SKILL.md).\n
- Sanitization: Absent.\n- [COMMAND_EXECUTION]: The instructions require the agent to discover and run automated checks (e.g., typecheck, tests, format), which involves executing scripts defined within the local project environment.
Audit Metadata