validate-release-green
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local shell commands via
npm runto execute diagnostic scripts located within the repository (e.g.,scripts/quality/validate-release-green.mjs). This is standard behavior for a developer-focused quality assurance tool. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret data from external sources, including local markdown files and the output of shell commands, which presents an attack surface for indirect prompt injection.
- Ingestion points: The file
../_shared/base-green.mdand the output (stdout/stderr) of the npm validation commands. - Boundary markers: The skill establishes a logical framework for interpreting data (distinguishing between HARD failures and DRIFT), but does not define explicit text delimiters for the ingested content.
- Capability inventory: The skill has the capability to execute repository-local npm scripts.
- Sanitization: No explicit sanitization or filtering of the ingested diagnostic data is described; the skill relies on the agent's analytical capabilities to categorize results.
Audit Metadata