maestro-milestone-release
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute shell commands for git operations, includinggit commit,git tag, andgit push. These actions are necessary for the skill's stated purpose of managing software releases. - [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection (Category 8) due to its data ingestion patterns.
- Ingestion points: The skill reads data from
git logand local milestone/phase summaries to generateCHANGELOG.mdentries. - Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" markers to isolate this external content from the agent's control logic.
- Capability inventory: The skill has access to
Bash(shell execution),Write, andEdit(file system modification). - Sanitization: The risk is mitigated by a mandatory confirmation gate using
request_user_input, which requires a user to review the release summary (version, milestone name, and changelog count) before any git write or push operations occur.
Audit Metadata