bumping-version
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's operations are transparent and aligned with its stated purpose of managing project versions. All automated actions are preceded by a user confirmation step.
- [COMMAND_EXECUTION]: The skill uses
gitcommands to retrieve commit history (git log) and update the repository (git add,git commit,git push). These are standard operations for a versioning tool. - [DATA_EXFILTRATION]: Pushes code changes to the remote repository via
git push origin HEAD:main. This external network operation is the intended outcome of a version release process. - [PROMPT_INJECTION]: The skill processes commit messages from
git logwhich could contain untrusted input. However, this indirect prompt injection surface is mitigated by the instruction to present a summary to the user for confirmation before any further action is taken.
Audit Metadata