bump-release
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the command
just full-writeif ajustfileis detected in the repository to format the changelog and package files. - [COMMAND_EXECUTION]: The skill performs several git operations, including
git status,git commit, andgit tag, to facilitate the release process. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection from processed repository data.
- Ingestion points: Data is ingested from
package.json,CHANGELOG.md, andgit diffoutputs. - Boundary markers: The instructions lack delimiters or specific warnings for the agent to ignore instructions embedded in the project's git history or files.
- Capability inventory: The skill has the ability to execute shell commands (
git,just) and modify local files. - Sanitization: The skill applies a scope filter based on the
filesfield inpackage.jsonto limit data ingestion, but it does not perform content-level sanitization on commit messages.
Audit Metadata