create-new-release
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands to interact with Git, performing operations such as fetching tags, checking branch status, and creating/pushing new tags.
- [EXTERNAL_DOWNLOADS]: The skill initiates network requests to the configured Git remote ('origin') to synchronize tags and verify commit presence.
- [PROMPT_INJECTION]: The skill processes untrusted data from the repository's tag history and the
META.jsonfile. Ingestion points: git tag history, META.json. Boundary markers: None. Capability inventory: Git command execution. Sanitization: Semantic versioning parsing logic (splitting by dots and extracting numbers) acts as a filter for malformed input.
Audit Metadata