commit-release-notes

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill references implementation status and verification evidence hosted on the developer's official GitHub repository (github.com/datex/datex-studio-cli).
  • [COMMAND_EXECUTION]: The skill provides instructions for using the dxs CLI tool. It explicitly recommends using file tools or quoted heredocs rather than shell interpolation when processing release notes text that may contain special characters like backticks or dollar signs, which serves as a mitigation against shell command injection.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for processing engineering notes from external markdown files (commit-notes.md).
  • Ingestion points: Reads content from commit-notes.md to be included in CLI payloads.
  • Boundary markers: Provides clear separation between commit titles, short descriptions, and detailed engineering notes.
  • Capability inventory: Uses the dxs CLI for performing commits and retrieving logs.
  • Sanitization: Includes specific instructions to avoid shell interpolation of prose, using heredocs to maintain data fidelity and prevent unintended command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 08:18 PM