dotnet-github-releases

Pass

Audited by Gen Agent Trust Hub on Mar 5, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill demonstrates workflows for extracting content from local files like CHANGELOG.md to populate release notes. This ingestion point creates an indirect prompt injection surface where instructions embedded in those files could influence agent behavior.
  • Ingestion points: CHANGELOG.md and release-notes.md (read via sed or cat).
  • Boundary markers: Extracted content is utilized as command-line arguments or API request body strings.
  • Capability inventory: Includes gh release create, gh release upload, and curl (API) which provide network access and data modification capabilities.
  • Sanitization: No explicit sanitization or validation of the file-sourced content is demonstrated.
  • [COMMAND_EXECUTION]: Provides various examples of using the gh CLI, dotnet CLI, and curl for standard release creation, build automation, and artifact management.
  • [EXTERNAL_DOWNLOADS]: Mentions well-known tools and services for release automation, including the softprops/action-gh-release GitHub Action and the git-cliff changelog generator.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 5, 2026, 09:30 PM