skills/dotnet/roslyn/snap/Gen Agent Trust Hub

snap

Pass

Audited by Gen Agent Trust Hub on Apr 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Automated Command Execution: The skill utilizes several command-line interfaces (CLIs) to automate the release process. This includes gh for GitHub repository management, darc for dependency and subscription management, and az repos for Azure DevOps interactions. These operations are essential for the skill's intended purpose of branch snapping.
  • Git Object Manipulation: It employs advanced git plumbing commands like commit-tree and write-tree to perform "take-source" merges. This method avoids traditional merge conflicts by programmatically constructing commit trees, which is a common pattern in complex CI/CD workflows.
  • Repository Configuration Management: The skill modifies configuration files such as PublishData.json and Versions.props to update version numbers and insertion targets. These changes are performed through the GitHub API and validated against current repository state to ensure consistency.
  • User Confirmation and Oversight: A key security feature is the requirement for a three-phase workflow: Gather, Plan, and Execute. The skill is instructed to present a full plan to the user and obtain explicit permission before creating branches, opening pull requests, or moving milestones.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 25, 2026, 03:10 PM