resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by instructing the agent to process untrusted data from external sources.\n
- Ingestion points: The agent is directed to read git history, pull request descriptions, and issue/ticket comments in SKILL.md.\n
- Boundary markers: No instructions for using delimiters or ignoring embedded prompts are present in the guidelines.\n
- Capability inventory: The agent has permissions to perform git operations, write to files, and execute shell commands for automated checks.\n
- Sanitization: No sanitization or validation of the external content is required before processing.\n- [COMMAND_EXECUTION]: Step 4 of the instructions requires the agent to find and run the project's automated checks, which involves executing code and scripts defined within the repository being worked on.
Audit Metadata