release
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes standard command-line utilities such as
gitandghto manage software releases. All operations are consistent with the stated purpose of automating versioning and release notes. - [PROMPT_INJECTION]: The skill incorporates an indirect prompt injection surface by reading commit history (
git log) to generate changelogs. This is a standard functional requirement for release automation and is assessed as low risk. - Ingestion points: Git commit messages via
git logcommand (SKILL.md) - Boundary markers: Absent (no explicit instructions to the agent to ignore instructions embedded in commit messages)
- Capability inventory: GitHub release creation via
gh release createand repository updates viagit push(SKILL.md) - Sanitization: Absent
Audit Metadata