adding-release-notes
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in this skill.
- [COMMAND_EXECUTION]: The skill uses standard development tools such as
gitand the GitHub CLI (gh) to retrieve pull request information. These operations are scoped to the intended task of identifying PR numbers for release notes. - [DATA_EXPOSURE]: The skill interacts with local project files specifically related to release documentation (
NEXT_RELEASE_NOTES.md). It does not access sensitive system files or credentials. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied descriptions and pull request metadata, the impact is limited to appending text to a markdown file via a local Dart script. The script uses
RegExp.escapewhen searching for sections, which is a good defensive practice against malformed inputs.
Audit Metadata