github-release-checker
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches release data from the official GitHub API (api.github.com). This is a well-known service and the operation is read-only.\n- [COMMAND_EXECUTION]: Executes a local Python script (scripts/check_releases.py) to process and format release data. The script uses no external dependencies and follows secure coding practices.\n- [PROMPT_INJECTION]: The skill processes external release descriptions from GitHub. While this presents a surface for indirect prompt injection if a repository contains malicious instructions in its release notes, the risk is inherent to the use case of summarizing external data, and the script includes length-based truncation to limit impact.
Audit Metadata