resolving-merge-conflicts

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read potentially untrusted data from the repository's history and metadata, which could theoretically contain instructions designed to manipulate the agent.
  • Ingestion points: Git commit messages, pull request descriptions, and issue tracker content mentioned in SKILL.md.
  • Boundary markers: No delimiters or specific 'ignore instructions' warnings are defined for external content.
  • Capability inventory: The skill utilizes git commands and executes project-specific automated checks (tests, typecheck, formatters).
  • Sanitization: No sanitization or validation of the commit/PR text is performed prior to processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 04:45 AM
Security Audit — agent-trust-hub — resolving-merge-conflicts