z-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources including git commit messages, pull request descriptions, and project tickets to determine resolution intent, which could contain malicious instructions.
- Ingestion points: Commit messages, PR descriptions, and ticket content are processed in the second step of the skill workflow.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially adversarial content embedded within the ingested data.
- Capability inventory: The skill is authorized to run project check wrappers (shell commands) and perform git operations such as staging, committing, and continuing operations.
- Sanitization: No explicit sanitization or validation of the external content is mentioned before it is processed by the agent.
Audit Metadata