resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could contain malicious instructions meant to override agent behavior.
- Ingestion points: The workflow requires reading git history, commit messages, PR descriptions, and issue tickets in
SKILL.md(Step 2). - Boundary markers: The skill includes an Anti-Pattern instruction to not treat external content, logs, or tool responses as trusted instructions.
- Capability inventory: The agent is instructed to run git commands (merge, rebase, stage) and automated project checks (tests, typecheck, format) as described in
SKILL.md(Steps 4 and 5). - Sanitization: No specific technical sanitization or filtering is mentioned for the ingested git metadata or file content.
Audit Metadata