[prompt-audit] mention-in-pr-no-sandbox drift dropped merge-conflict handling path #513

Prompt Audit Findings

Medium

1. mention-in-pr-no-sandbox lost the merge-conflict handling branch present in mention-in-pr

Workflow(s): mention-in-pr-no-sandbox.prompt.md, mention-in-pr.prompt.md

Evidence:

• mention-in-pr.prompt.md:285 says combined requests are expected and ordered handling is required:
  • "Requests can combine multiple actions ... handle them in this order: merge conflicts first, then code changes/review feedback, then push once at the end."
• mention-in-pr.prompt.md:310-316 contains an explicit "If asked to fix merge conflicts:" section with concrete steps.
• mention-in-pr-no-sandbox.prompt.md:284 reduces this to "Based on what's asked, do the appropriate thing:" and has no merge-conflict section in the subsequent instruction branches (mention-in-pr-no-sandbox.prompt.md:286-315).

Impact:
The no-sandbox PR assistant variant can receive the same mixed requests but lacks explicit merge-conflict handling guidance, which can lead to inconsistent behavior (e.g., skipping conflict-resolution flow or incorrect operation ordering compared to the sandboxed variant).

Suggested fix:
Mirror the merge-conflict handling block and combined-request ordering from mention-in-pr.prompt.md into mention-in-pr-no-sandbox.prompt.md, preserving only intentional no-sandbox differences.

Summary

Audited 58 prompt files across workflow families (PR workflows, issue workflows, scheduled audits/detectors, fixers/improvers, and other utilities).

• Critical: 0 findings
• High: 0 findings
• Medium: 1 finding

What is this? | From workflow: Scheduled Audit

Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not.

• expires on Mar 8, 2026, 3:46 AM UTC