fix-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes merge conflicts from source files which are considered untrusted data. If an attacker controls a branch involved in the merge, they could embed malicious instructions or code that the agent might inadvertently execute or follow.
- Ingestion points: Source code files with unresolved merge markers.
- Capability inventory: Shell execution of build, lint, and test suites.
- Boundary markers: The skill lacks explicit instructions to treat code comments or external data as non-executable instructions or to ignore embedded prompts.
- Sanitization: No sanitization or validation of the conflicting content is performed before execution.
- [COMMAND_EXECUTION]: The workflow explicitly utilizes shell commands to interact with git, package managers, and build systems. This capability is necessary for the skill's primary function but increases the impact of a successful indirect prompt injection attack.
Audit Metadata