resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted external data that could contain instructions meant to subvert the agent's logic during conflict resolution. 1. Ingestion points: Git history, commit messages, pull request descriptions, issue trackers, and conflicting file content as specified in SKILL.md. 2. Boundary markers: None. The instructions do not require the use of delimiters or specific directives to ignore embedded instructions in the ingested data. 3. Capability inventory: The agent is instructed to use git commands and execute the project's automated checks (e.g., tests, typecheck, formatters). 4. Sanitization: None. The skill does not provide instructions for sanitizing or validating external content before it is processed.
- [COMMAND_EXECUTION]: The skill instructs the agent to discover and run the project's automated checks. This involves executing shell commands which, while necessary for the skill's purpose, could be exploited if an attacker has modified the project's test or build configuration files.
Audit Metadata