release
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a typical software release process. It involves scanning the repository for changes, updating version information in pyproject.toml and Cargo.toml, and automating the creation of pull requests using the gh CLI. These are standard administrative tasks for a developer tool.
- [COMMAND_EXECUTION]: The workflow leverages common development tools like uv (for Python environment synchronization) and gh (for GitHub management). These tools are used for their intended purposes within a local development environment.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local repository content to automate release tasks, representing an ingestion surface for project data.
- Ingestion points: Files located in packages/, sdks/, the repository root, AGENTS.md, and .github/workflows/.
- Boundary markers: The flow requires the agent to confirm new versions with the user ('confirm_versions'), providing a manual checkpoint.
- Capability inventory: Modification of local configuration and changelog files; execution of dependency managers (uv) and Git commands; interaction with the GitHub API via gh.
- Sanitization: The process relies on standard Git/CLI tool behavior and explicit user confirmation steps.
Audit Metadata