release-management
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a structured framework for managing music release metadata through document templates. It operates within a specific directory hierarchy and does not attempt to access sensitive system files or credentials.
- [COMMAND_EXECUTION]: The skill utilizes basic shell commands like
mkdir -pto create the necessary folder structure for new releases. This use of command execution is legitimate, well-documented, and limited to organizing project files within the artist's workspace. - [PROMPT_INJECTION]: The skill ingests data from RELEASE.md files, presenting a surface for indirect prompt injection. 1. Ingestion points: RELEASE.md (read in SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: mkdir and file write operations (SKILL.md). 4. Sanitization: Absent. This is assessed as safe given the narrow operational scope of the skill and the fact that it only manages its own project documents.
Audit Metadata