codex-resolve-rebase-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill operates entirely within the local git repository context and follows secure practices, such as pinning the collation order and using stage numbers to prevent conflict resolution errors. No network operations or unauthorized system accesses were detected.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from git conflict markers through
git cat-file blobcalls inscripts/classify-conflicts.shandscripts/resolve-union.sh. While this creates an indirect prompt injection surface, it is a functional requirement for conflict resolution. The scripts provide clear boundary markers in their output, and the agent's capabilities are limited to local repository modifications. No sanitization is performed on the raw diff content, but mechanical resolutions are validated.\n- [DYNAMIC_EXECUTION]: Thescripts/resolve-union.shscript generates and executes a static Python heredoc to verify that the union of two file versions is sorted and lossless. This represents a low-severity dynamic execution pattern used for integrity checking rather than processing external or untrusted code.
Audit Metadata