release
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bunandgitto perform release management operations. This includes runningbun changesetfor versioning,bun installfor dependency management, andgit addfor committing changeset metadata. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external data to drive the release flow.
- Ingestion points: Reads release intent and summary information from
.changeset/*.mdfiles and content from GitHub Version Pull Requests. - Boundary markers: None explicitly defined for the processed markdown content.
- Capability inventory: Includes the ability to execute shell commands for package management, version synchronization, and source control operations.
- Sanitization: No specific sanitization or filtering of the ingested markdown summaries is described; content is propagated to changelogs and version metadata.
Audit Metadata