cull-release-prepare
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local project scripts via
npm run release:cull. It enforces a secure workflow by requiring a dry-run phase with JSON output verification before performing the actual release preparation commit. - [PROMPT_INJECTION]: While the skill processes external data such as release notes and metadata, it explicitly mitigates indirect prompt injection and command injection risks. The instructions mandate the use of argument arrays and safe quoting for user-supplied content, specifically forbidding the evaluation of concatenated commands.
Audit Metadata