snapshot-release
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes
ghandgitcommands to manage pull requests and monitor GitHub Actions. It includes commands forgit status,git push,gh pr view, andgh run watchto orchestrate the release process. - [EXTERNAL_DOWNLOADS]: Monitors and reports on external build artifacts (tarballs) generated by GitHub Actions. The resources are restricted to the project's own CI/CD environment.
- [PROMPT_INJECTION]: Processes data from PR comments, which is an untrusted source. The skill employs strict pattern matching via
jqfilters to ensure it only reacts to specific, expected release triggers and reports.
Audit Metadata