release
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands using
gitandgh(GitHub CLI) to manage tags, fetch history, and create releases. It also executes build and test commands derived from the target project's local environment. - [DYNAMIC_EXECUTION]: The skill performs dynamic command determination by reading instructions from project-specific files like
CLAUDE.mdorAGENTS.md. If a## Releasingsection contains a check command, the skill executes it exactly as written. It also auto-detects build scripts frompackage.jsonandcomposer.jsonand executes them using detected package managers (npm, bun, yarn, pnpm). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the project directory which could influence its behavior if used on a malicious repository.
- Ingestion points: Target repository files including
CLAUDE.md,AGENTS.md,package.json,composer.json, and git tag metadata. - Boundary markers: None present; the skill trustingly parses and executes instructions found in these files as part of the release workflow.
- Capability inventory: Execution of shell commands via
git,gh, and various package managers. The skill can run arbitrary commands defined in the project's documentation files. - Sanitization: None present; command strings extracted from configuration files are executed without validation or escaping.
Audit Metadata