prepare-release
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute a local script and perform git operations to automate the release process.
- Evidence: The instructions explicitly direct the agent to 'Run the release-prep script directly after the changelog edits' and perform git tasks such as 'checking out main' and 'pulling the latest changes'.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository's git history, creating a potential surface for indirect injection via malicious commit messages.
- Ingestion points: The agent reviews 'all changes since that release' and audits 'CHANGES.md', which incorporates external content from commit logs and PR descriptions.
- Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the git logs or changelog data.
- Capability inventory: The skill has the capability to modify repository files (CHANGES.md, package.json, .uplugin) and execute a local shell script (release-prep).
- Sanitization: No specific sanitization or filtering of commit data is mentioned, although the skill includes a safety step to 'Review the resulting diff before committing anything'.
Audit Metadata