release-openspec
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses
gitcommands (fetch, log, worktree) andghcommands (pr list, release edit, api) to manage the release lifecycle of the repository. - [COMMAND_EXECUTION]: Employs
pnpm exec changesetto calculate versions and update changelogs based on local changeset files. - [EXTERNAL_DOWNLOADS]: Interacts with GitHub APIs and the NPM registry to synchronize repository state and verify artifact publishing.
- [PROMPT_INJECTION]: Processes external data from Pull Request titles and descriptions to generate release notes. The skill mitigates risks by instructing the agent to cross-check content against the formal
CHANGELOG.mdand strictly follow a structured release note template. - [SAFE]: Implements security boundaries, including repository owner validation and a prohibition on self-approving pull requests.
Audit Metadata