fix-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The workflow involves executing local development tools including git, package managers for lockfile regeneration, compilers, linters, and test runners. This is standard for development tasks but represents a functional capability that an attacker could target through compromised source code.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it reads and interprets conflict markers and source code from git branches, which are considered untrusted inputs.
- Ingestion points: Git conflict markers and source code files (SKILL.md workflow).
- Boundary markers: Absent. There are no instructions to the agent to treat conflict content as data only or to ignore embedded instructions.
- Capability inventory: File system modification, shell command execution for git, package managers, and build/test tools (SKILL.md).
- Sanitization: None. The skill focuses on correctness-first edits but does not include sanitization of external content.
Audit Metadata