bumping-version

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's operations are transparent and aligned with its stated purpose of managing project versions. All automated actions are preceded by a user confirmation step.
  • [COMMAND_EXECUTION]: The skill uses git commands to retrieve commit history (git log) and update the repository (git add, git commit, git push). These are standard operations for a versioning tool.
  • [DATA_EXFILTRATION]: Pushes code changes to the remote repository via git push origin HEAD:main. This external network operation is the intended outcome of a version release process.
  • [PROMPT_INJECTION]: The skill processes commit messages from git log which could contain untrusted input. However, this indirect prompt injection surface is mitigated by the instruction to present a summary to the user for confirmation before any further action is taken.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 03:01 AM
Security Audit — agent-trust-hub — bumping-version