melt
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts packaged as zipapps (
melt.pyz) and standard development tools such asgit,mergiraf, andkdiff3to analyze and resolve merge conflicts. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes conflict hunks from source code files, which constitutes an ingestion point for untrusted data.
- Ingestion points:
conflict-summaryandbatch-resolvecommands read file content containing Git conflict markers (SKILL.md). - Boundary markers: No explicit boundary markers or instructions to ignore embedded instructions within conflict data are specified in the protocol.
- Capability inventory: The skill has the capability to write to the filesystem (
cp), stage files (git add), and continue Git operations (git merge --continue), alongside executing local scripts (SKILL.md). - Sanitization: The instructions do not describe any sanitization or filtering of the content within conflict markers before it is presented to or processed by the agent.
Audit Metadata