gh-oss-release
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage software releases. It uses
gh apito fetch repository commits,gh release createto automate tag and release generation, andgitcommands (pull,add,commit,push) to update a Homebrew tap repository at~/ghq/github.com/jackchuka/homebrew-tap. It also executesmake updatewithin the local tap directory to process formulae updates. - [PROMPT_INJECTION]: The skill processes untrusted commit message data which presents an indirect prompt injection surface.
- Ingestion points: Commit messages from external repositories are fetched via
gh apiand analyzed inSKILL.md(Step 2). - Boundary markers: The workflow does not utilize specific delimiters or instructions to prevent the agent from interpreting commit message content as instructions.
- Capability inventory: The agent has capabilities to create GitHub releases, push to remote repositories, and execute local
makecommands. - Sanitization: No explicit filtering or validation logic is applied to the ingested commit messages before they are processed for semver classification.
Audit Metadata