grouping-releases
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it instructs the agent to process data from external, untrusted sources while having state-changing capabilities.\n
- Ingestion points: The agent reviews releases from sources like product changelogs, news pages, and engineering blogs, as described in the "What this is for" section of SKILL.md.\n
- Boundary markers: No specific delimiters or boundary markers are defined to isolate the external content from the agent's core processing logic.\n
- Capability inventory: The agent can modify the database via
POST /v1/releases/:canonicalId/coverageandDELETE /v1/releases/:id/coverage(SKILL.md).\n - Sanitization: There are no instructions to sanitize or validate the release content before it is processed by the agent.\n- [NO_CODE]: The skill consists entirely of instructional markdown and does not include any executable scripts or binaries.
Audit Metadata