version-bump-cx

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests git commit history to automate documentation updates and changelog generation.
  • Ingestion points: Git commit messages collected via git log in Phase 2, Step 4 of SKILL.md.
  • Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore embedded commands within the commit messages it reads.
  • Capability inventory: The agent has the ability to run npm install (Step 9), npm test (Step 13), and git commit (Step 16), as well as perform file writes and modifications using sed -i.
  • Sanitization: The instructions ask the agent to rewrite commit messages into human-readable descriptions, which relies on the LLM's interpretation rather than technical sanitization or escaping of the input data.
  • [COMMAND_EXECUTION]: The skill makes extensive use of shell commands to perform maintenance tasks and verify project state.
  • Evidence: The skill utilizes npm version, sed -i, npm install, npm test, and git commit commands to automate the versioning workflow across multiple files and packages.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 07:22 PM