Release Management
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates standard development operations using local scripts for versioning, tagging, and deployment. No malicious behavior, obfuscation, or unauthorized data access was detected.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git commit messages to generate changelogs, creating a potential surface for indirect prompt injection.\n
- Ingestion points: Git commit history (via
./scripts/release.sh changelog).\n - Boundary markers: Documentation does not mention delimiters or instructions to ignore embedded content in commit messages.\n
- Capability inventory: Shell command execution via
Bashtool, file system modification of configuration files, and network operations throughgit push.\n - Sanitization: No explicit sanitization or filtering of commit message content is described.
Audit Metadata