release-note-generation

Fail

Audited by Runlayer on Mar 7, 2026

Risk Level: HIGH
Scan Summary
Max Score
90%
Files
13
Flagged
11
Chunks
15
Flagged Files (11)
release-note-generation/scripts/dump-prs-since-commit.ps1HIGH
90.4%

Risky tool definition detected

Tool: release-note-generation/scripts/dump-prs-since-commit.ps1 [2/2] Description: -and $_.Pr -eq $prNumber2 })) { $mergeCommits += [PSCustomObject]@{ Sha = $c; Pr = $prNumber2; Subject = $subject; Pattern = 'squash' } Write-DebugMsg "Matched squash PR #$prNumber2 in commit $c" } $matched = $true } if (-not $matched) { Write-DebugMsg "No PR pattern in commit $c : $subject" } } if (-not $mergeCommits -or $mergeCommits.Count -eq 0) { Write-Warn "No merge commits with PR numbers found in range."; e

release-note-generation/references/step3-review-grouping.mdMEDIUM
89.9%

Risky tool definition detected

```powershell pwsh ./.github/skills/release-note-generation/scripts/dump-prs-since-commit.ps1 ` -StartCommit '{{PreviousReleaseTag}}' -Branch 'stable' ` -OutputDir 'Generated Files/ReleaseNotes' ``` --- ## 3.3 Group PRs by Label ```powershell pwsh ./.github/skills/release-note-generation/scripts/group-prs-by-label.ps1 -CsvPath 'Generated Files/ReleaseNotes/sorted_prs.csv' -OutDir 'Generated Files/ReleaseNotes/grouped_csv' ``` Creates `Generated Files/ReleaseNotes/grouped_csv/` with one CSV per l

release-note-generation/scripts/group-prs-by-label.ps1MEDIUM
83.4%

Risky tool definition detected

Filenames are sanitized (invalid characters, whitespace collapsed) and truncated to <= 120 characters. #> param( [string]$CsvPath = "sorted_prs.csv", [string]$OutDir = "grouped_csv" ) $ErrorActionPreference = 'Stop' function Write-Info($msg) { Write-Host "[info] $msg" -ForegroundColor Cyan } function Write-Warn($msg) { Write-Host "[warn] $msg" -ForegroundColor Yellow } if (-not (Test-Path -LiteralPath $CsvPath)) { throw "CSV not found: $CsvPath" } Write-Info "Reading CSV: $CsvPath" $rows = Impor

release-note-generation/scripts/collect-or-apply-milestones.ps1MEDIUM
77.5%

Risky tool definition detected

release-note-generation/scripts/find-commit-by-title.ps1LOW
71.6%

Risky tool definition detected

release-note-generation/references/step2-labeling.mdLOW
69.7%

Tool passed security scan

release-note-generation/references/SampleOutput.mdLOW
69.1%

Tool passed security scan

release-note-generation/references/step1-collection.mdLOW
67.2%

Tool passed security scan

release-note-generation/SKILL.mdLOW
63.3%

Tool passed security scan

release-note-generation/references/step4-summarization.mdLOW
56.9%

Tool passed security scan

release-note-generation/scripts/diff_prs.ps1LOW
56.7%

Tool passed security scan

Passed Files (2)Click to expand
release-note-generation/scripts/apply-labels.ps1OK
47.2%

Tool passed security scan

release-note-generation/LICENSE.txtOK
36.5%

Tool passed security scan

Audit Metadata
Max File Score
90%
Classification
UNKNOWN_SERVER
Files Scanned
13
Files Flagged
11
Chunks Analyzed
15
Analyzed
Mar 7, 2026, 10:53 AM
Security Audit — runlayer — release-note-generation