resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions require the agent to execute
gitcommands (status, history, staging, committing) and run local repository validation scripts or "affected checks" to verify the integrated result. This is standard functionality for a development-focused skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by reading conflicting code hunks and external PR or issue references to determine developer intent. This creates an attack surface where malicious instructions embedded in those external sources could potentially influence the agent, although this is inherent to the task of code integration.
Audit Metadata