merge-prep
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands such as
git log,git diff, andgit merge-treevia a Bash script to perform repository analysis. These operations are limited to read-only and dry-run tasks, and the skill contains explicit instructions prohibiting automated commits, merges, or pushes. - [PROMPT_INJECTION]: The skill processes untrusted data from the repository's commit history and file structure, which creates a surface for indirect prompt injection.
- Ingestion points: Commit messages and file names are read from the repository into the agent's context through
git logandgit diffoutput inscripts/pre-merge-check.sh. - Boundary markers: The skill formats the analysis results as a structured JSON object, providing a clear boundary for the agent between metadata and content.
- Capability inventory: The skill is granted access to the
Bash,Read,Grep, andGlobtools. - Sanitization: The Bash script uses
awkto escape double quotes in commit messages before including them in the JSON output to prevent schema confusion and formatting errors.
Audit Metadata