skills/alien-id/agent-id/release/Gen Agent Trust Hub

release

Pass

Audited by Gen Agent Trust Hub on Aug 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses bun and git to perform release management operations. This includes running bun changeset for versioning, bun install for dependency management, and git add for committing changeset metadata.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external data to drive the release flow.
  • Ingestion points: Reads release intent and summary information from .changeset/*.md files and content from GitHub Version Pull Requests.
  • Boundary markers: None explicitly defined for the processed markdown content.
  • Capability inventory: Includes the ability to execute shell commands for package management, version synchronization, and source control operations.
  • Sanitization: No specific sanitization or filtering of the ingested markdown summaries is described; content is propagated to changelogs and version metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 28, 2026, 04:21 PM
Security Audit — agent-trust-hub — release