snapshot-release

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Utilizes gh and git commands to manage pull requests and monitor GitHub Actions. It includes commands for git status, git push, gh pr view, and gh run watch to orchestrate the release process.
  • [EXTERNAL_DOWNLOADS]: Monitors and reports on external build artifacts (tarballs) generated by GitHub Actions. The resources are restricted to the project's own CI/CD environment.
  • [PROMPT_INJECTION]: Processes data from PR comments, which is an untrusted source. The skill employs strict pattern matching via jq filters to ensure it only reacts to specific, expected release triggers and reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 01:17 AM
Security Audit — agent-trust-hub — snapshot-release