merge-into-branch
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill utilizes standard development tools including the
gitCLI for branch management and thedotnetCLI for building and updating resources. These operations are essential for the skill's stated purpose of merging codebases. - Local Script Execution: The workflow includes the execution of repository-specific scripts, such as
eng/generate-compiler-code.csandbuild.sh. These are identified as standard components of the Roslyn build environment used to maintain generated code and validate merge results. - Data Ingestion and Processing: The skill directs the agent to read and resolve merge conflicts in localization files (
.xlf,.resx) and source code. While this involves processing potentially untrusted data from different branches, the skill mitigates risk by requiring a post-resolution validation build with analyzers enabled.
Audit Metadata