gh-release
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands including
git tag,git push, and the GitHub CLI (gh release create) to manage repository versions and releases. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the following surface:
- Ingestion points: Reads content from files matching the pattern
log/changelog-*.mdto use as release notes (SKILL.md). - Boundary markers: The instructions do not specify any delimiters or warnings to the agent to ignore potentially malicious instructions embedded within the changelog files.
- Capability inventory: The agent has the ability to push tags to remote repositories (
git push origin) and create public releases (gh release create) (SKILL.md). - Sanitization: There is no mention of sanitizing or validating the content read from the changelog before it is processed by the agent or passed to the GitHub CLI.
Audit Metadata