configure-release-please
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs a network request to the official GitHub API (
api.github.com) to retrieve the latest version of therelease-please-action. This is a well-known service and the data retrieved is used solely for version synchronization. - [COMMAND_EXECUTION]: The skill utilizes dynamic context injection via the
!commandsyntax in theSKILL.mdfile. These commands (specificallyfind) are used to automatically locate project manifests and workflow files when the skill is loaded, which is a standard method for providing relevant environment context to the agent. - [COMMAND_EXECUTION]: The skill includes instructions to run shell commands like
jqandfindfor verifying local configuration files. These operations are limited to the local filesystem and are consistent with the skill's stated purpose of auditing project standards.
Audit Metadata