final-release-review
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- Command Execution: The skill executes local
gitcommands and a provided bash script to automate the retrieval of release tags and repository metadata. These actions are standard for auditing software releases. - External Network Interaction: It synchronizes with remote sources using
git fetchto ensure it has the latest commit history and tags. It also generates links to official repository diffs on GitHub for reviewer context. - Indirect Prompt Injection Surface: The skill processes external data such as git commit messages and code diffs which could potentially contain adversarial instructions.
- Ingestion points: The agent ingests data from
git diffandgit logoutputs to perform its audit. - Boundary markers: No explicit delimiters or instructions are used to separate ingested git data from the agent's primary directives.
- Capability inventory: The skill executes local shell scripts and git commands to process repository information.
- Sanitization: There is no evidence of sanitization or validation performed on commit messages or diff content before they are evaluated by the agent.
Audit Metadata