configure-release-please
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the latest version tag of
release-please-actionfrom GitHub's official API (api.github.com). This is a well-known service and the operation is used to ensure the project uses the most recent version of the action.- [COMMAND_EXECUTION]: Uses standard CLI tools likefind,curl, andjqto inspect the file system and process JSON data from trusted sources. These operations are restricted to the local project directory and official GitHub APIs.- [PROMPT_INJECTION]: The skill processes data from local project files, creating an indirect prompt injection surface. - Ingestion points: Reads
package.json,pyproject.toml,Cargo.toml,go.mod,release-please-config.json, and.release-please-manifest.jsonfrom the project root. - Boundary markers: None explicitly defined for prompt interpolation.
- Capability inventory: Includes
Bash(viafind,curl,jq),Write, andEdittools. - Sanitization: Uses
jqto validate JSON structure before processing.
Audit Metadata