release-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to use the gh (GitHub CLI) and git command-line tools for repository state verification, tag creation, release publishing, and monitoring GitHub Actions workflow runs.
  • [DYNAMIC_EXECUTION]: For specific project configurations (such as the afaraha8403/balakit repository), the skill executes local scripts like ./sync.sh and node scripts/check-lockstep.mjs. These are identified as legitimate project-level automation tools for synchronization and validation before a release.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data by reading CHANGELOG.md files from the target repository to extract release notes. While this is an ingestion surface, the instructions guide the agent to extract only specific version-relevant sections, which acts as a logical boundary for the processed data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 05:41 PM