release-management
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local
gitandgh(GitHub CLI) commands to perform repository management tasks such as tagging, pushing updates, and creating release entries. - [DYNAMIC_EXECUTION]: The skill uses
node -eandsedto programmatically update version identifiers in files likepackage.jsonandpyproject.toml. It also uses command execution blocks within script metadata to dynamically fetch the current branch, tag, and commit history. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository data (git commit messages) to automate changelog creation and suggest version bumps.
- Ingestion points: Commit history is retrieved using
git loginscripts/create-release.mdandscripts/version-manager.py. - Boundary markers: None; commit messages are directly interpolated into release notes and CLI command arguments.
- Capability inventory: Local file system modifications and remote repository interaction via GitHub CLI.
- Sanitization: Employs regex to match conventional commit types (e.g., 'feat', 'fix'), but description content is not specifically sanitized against instructions.
Audit Metadata