resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by directing the agent to process untrusted external data.
- Ingestion points:
SKILL.mdinstructs the agent to read commit messages, pull requests, and original issues or tickets. - Boundary markers: The skill does not define delimiters or instructions to isolate the external content from the prompt context.
- Capability inventory: The agent is expected to perform file system operations, git commands, and execute shell-based automated checks (tests, formatting, etc.).
- Sanitization: The instructions do not include steps to sanitize or filter external metadata before it is processed by the agent.
Audit Metadata