tenzir-ship
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local utility script
scripts/detect-change-scope.shto determine which files have changed in the Git repository. - [COMMAND_EXECUTION]: It uses the GitHub CLI (
gh) within thereferences/create-remote-release.mdinstructions to interact with repository workflows and manage releases. - [EXTERNAL_DOWNLOADS]: The skill uses
uvxto download and execute thetenzir-shiptool from the Python package registry at runtime. - [PROMPT_INJECTION]: The skill processes file content from the local repository (unreleased changelog entries) to draft release metadata, creating an indirect prompt injection surface.
- Ingestion points: Reads unreleased entry files from the repository's changelog directory.
- Boundary markers: No explicit markers are used to delimit external data from agent instructions.
- Capability inventory: Includes access to
git,gh, and local file execution. - Sanitization: No specific sanitization or validation of the ingested changelog content is described.
Audit Metadata