release-flutter-web-s3
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/release_web_s3.shscript is designed to execute arbitrary shell commands provided through environment variables such asPRE_BUILD_CMD,TEST_CMD, andSLANG_CMD. These commands are executed viabash -lc, which is a standard mechanism for flexible build scripts but represents a direct command execution capability. - [PROMPT_INJECTION]: The
scripts/prepare_web_release.pyscript facilitates an indirect prompt injection surface by processing untrusted data from Git commit history. - Ingestion points: Git commit subjects and bodies are fetched using
git loginscripts/prepare_web_release.pyto generate release notes. - Boundary markers: The generated report uses
RELEASE_NOTES_STARTandRELEASE_NOTES_ENDdelimiters to scope the ingested content. - Capability inventory: The skill possesses file write access (
pubspec.yaml), shell execution viabash -lcinscripts/release_web_s3.sh, and network operations viaaws s3 sync. - Sanitization: Commit messages are used verbatim in the output without sanitization, allowing potentially malicious instructions in a commit to be presented to the agent during the release process.
Audit Metadata