releases
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides guidelines for automating and validating software releases using the
atmosCLI. It emphasizes security controls such as OIDC signing, build provenance, and numeric user ID verification for release initiators. - [INDIRECT_PROMPT_INJECTION]: The orchestration process relies on repository metadata such as PR labels (
major,minor, etc.) and milestone names. The skill mitigates risks by requiring native confirmation for critical actions likeatmos release cutand performing preflight checks that verify the exact commit SHA and PR statuses before proceeding.
Audit Metadata