bump-version
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates version bumping by executing local repository scripts (
scripts/bump-version.pyandvalidate-repo.sh) vianpm. These operations are scoped to local file system modifications for project maintenance.\n- [INDIRECT_PROMPT_INJECTION]: The skill uses user input from$ARGUMENTSto determine the version string used in shell commands. This constitutes a data ingestion point with direct interpolation into a command-line interface.\n - Ingestion points: Step 1 (Target version from $ARGUMENTS)\n
- Boundary markers: None described in the instructions.\n
- Capability inventory: Shell command execution via npm.\n
- Sanitization: No explicit sanitization of the version string is mentioned in the skill instructions.
Audit Metadata