skills/cloudposse/atmos/releases/Gen Agent Trust Hub

releases

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides guidelines for automating and validating software releases using the atmos CLI. It emphasizes security controls such as OIDC signing, build provenance, and numeric user ID verification for release initiators.
  • [INDIRECT_PROMPT_INJECTION]: The orchestration process relies on repository metadata such as PR labels (major, minor, etc.) and milestone names. The skill mitigates risks by requiring native confirmation for critical actions like atmos release cut and performing preflight checks that verify the exact commit SHA and PR statuses before proceeding.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 07:51 AM