snap
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Automated Command Execution: The skill utilizes several command-line interfaces (CLIs) to automate the release process. This includes
ghfor GitHub repository management,darcfor dependency and subscription management, andaz reposfor Azure DevOps interactions. These operations are essential for the skill's intended purpose of branch snapping. - Git Object Manipulation: It employs advanced git plumbing commands like
commit-treeandwrite-treeto perform "take-source" merges. This method avoids traditional merge conflicts by programmatically constructing commit trees, which is a common pattern in complex CI/CD workflows. - Repository Configuration Management: The skill modifies configuration files such as
PublishData.jsonandVersions.propsto update version numbers and insertion targets. These changes are performed through the GitHub API and validated against current repository state to ensure consistency. - User Confirmation and Oversight: A key security feature is the requirement for a three-phase workflow: Gather, Plan, and Execute. The skill is instructed to present a full plan to the user and obtain explicit permission before creating branches, opening pull requests, or moving milestones.
Audit Metadata