final-release-review

Fail

Audited by Runlayer on Mar 8, 2026

Risk Level: HIGH
Scan Summary
Max Score
96%
Files
3
Flagged
3
Chunks
4
Flagged Files (3)
final-release-review/scripts/find_latest_release_tag.shHIGH
95.7%

Risky tool definition detected

git fetch "$remote" --tags --prune --quiet latest_tag=$(git tag -l "$pattern" --sort=-v:refname | head -n1) if [[ -z "$latest_tag" ]]; then echo "No tags found matching pattern '$pattern' after fetching from $remote." >&2 exit 1 fi echo "$latest_tag"

final-release-review/SKILL.mdHIGH
93.1%

Risky tool definition detected

Sync tags and pick base (default `v*`): ```bash BASE_TAG="$(.agents/skills/final-release-review/scripts/find_latest_release_tag.sh origin 'v*')" ``` 3. Choose target commit (default tip of `origin/main`, ensure fresh): `git fetch origin main --prune` then `TARGET="$(git rev-parse origin/main)"`. 4. Snapshot scope: ```bash git diff --stat "${BASE_TAG}"..."${TARGET}" git diff --dirstat=files,0 "${BASE_TAG}"..."${TARGET}" git log --oneline --reverse "${BASE_TAG}".."${TARGET}" git diff --name-status

final-release-review/references/review-checklist.mdMEDIUM
82.7%

Risky tool definition detected

Audit Metadata
Max File Score
96%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
3
Files Flagged
3
Chunks Analyzed
4
Analyzed
Mar 8, 2026, 03:57 PM
Security Audit — runlayer — final-release-review