capgo-release-management
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx @capgo/cli@latestto execute the latest version of the official Capgo command-line interface directly from the npm registry. - [COMMAND_EXECUTION]: Provides guidance for executing shell commands to manage application bundles, distribution channels, and security keys. All operations are scoped to the vendor's release management ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing local application files and bundle metadata during the upload process. The risk is minimized by following standard vendor release procedures and using specific command flags.
- [CREDENTIALS_SAFE]: Includes explicit safety instructions to keep private encryption keys out of version control and manage them locally via the CLI.
Audit Metadata