resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading external, untrusted content like commit messages, pull request descriptions, and issue tickets to understand context. Maliciously crafted content in these sources could attempt to influence the agent's behavior during the resolution process.
- Ingestion points: Git commit messages, Pull Requests, Issue trackers/tickets (SKILL.md Step 2).
- Boundary markers: Absent.
- Capability inventory: Shell command execution for testing/linting (Step 4), Git commands for staging and committing (Step 5).
- Sanitization: Absent.
- [DYNAMIC_EXECUTION]: Step 4 instructs the agent to discover and run the project's automated checks (typecheck, tests, format). This involves executing arbitrary code or scripts defined within the repository being worked on.
Audit Metadata