resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions direct the agent to ingest potentially untrusted data from external sources and then execute local commands, creating an indirect prompt injection surface.
- Ingestion points: Step 2 in
SKILL.mdinstructs the agent to "Read the commit messages, check the PRs, check original issues/tickets" to understand the intent of changes. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands in the ingested git metadata are provided.
- Capability inventory: Step 4 in
SKILL.mdinstructs the agent to "Discover the project's automated checks and run them," which involves executing arbitrary shell commands (tests, typechecks, formatters) found within the local repository. - Sanitization: No sanitization or validation of the content read from PRs or issues is performed before the agent proceeds to execution steps.
Audit Metadata