release-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to use the
gh(GitHub CLI) andgitcommand-line tools for repository state verification, tag creation, release publishing, and monitoring GitHub Actions workflow runs. - [DYNAMIC_EXECUTION]: For specific project configurations (such as the
afaraha8403/balakitrepository), the skill executes local scripts like./sync.shandnode scripts/check-lockstep.mjs. These are identified as legitimate project-level automation tools for synchronization and validation before a release. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading
CHANGELOG.mdfiles from the target repository to extract release notes. While this is an ingestion surface, the instructions guide the agent to extract only specific version-relevant sections, which acts as a logical boundary for the processed data.
Audit Metadata