fix-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Git conflict markers and branch data, which could contain malicious instructions.
- Ingestion points: Reads files with unresolved merge conflicts identified via git status (SKILL.md).
- Boundary markers: Absent; the skill does not explicitly use delimiters or instructions to ignore embedded commands within the conflicting text.
- Capability inventory: Executes package managers, compilers, linters, and project-specific test suites (SKILL.md).
- Sanitization: Absent; the skill executes build and test logic directly as defined in the repository.
- [COMMAND_EXECUTION]: The skill relies on executing shell commands to manage the development environment and validate code changes.
- Evidence: Instructs the agent to 'Regenerate lockfiles with package manager tools' and 'Run compile, lint, and relevant tests' (SKILL.md).
Audit Metadata