release-management

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides a structured framework for managing music release metadata through document templates. It operates within a specific directory hierarchy and does not attempt to access sensitive system files or credentials.
  • [COMMAND_EXECUTION]: The skill utilizes basic shell commands like mkdir -p to create the necessary folder structure for new releases. This use of command execution is legitimate, well-documented, and limited to organizing project files within the artist's workspace.
  • [PROMPT_INJECTION]: The skill ingests data from RELEASE.md files, presenting a surface for indirect prompt injection. 1. Ingestion points: RELEASE.md (read in SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: mkdir and file write operations (SKILL.md). 4. Sanitization: Absent. This is assessed as safe given the narrow operational scope of the skill and the fact that it only manages its own project documents.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 03:04 AM