resolving-merge-conflicts
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and interpret data from external sources that could contain malicious instructions.
- Ingestion points: The agent is directed to read commit messages, PR descriptions, and original issues/tickets to understand the intent of changes (SKILL.md).
- Boundary markers: There are no instructions for the agent to use delimiters or to disregard potential instructions embedded within the git history or issue metadata.
- Capability inventory: The skill allows the agent to modify the repository state by resolving conflicts, staging changes, and running automated project checks like tests and formatters.
- Sanitization: The instructions do not include steps to sanitize or validate the content of the external data before the agent uses it to make decisions about code resolution.
Audit Metadata