re0-release
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands to facilitate the release process, including
git tag -s,git push, andmvfor file management. It also attempts to run local utilities likesip,shower,factchk,mandela,ssotize, andre0if present in the environment. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is instructed to analyze pending diffs and external contributions (Pull Requests) to determine versioning and drafting release notes.
- Ingestion points: Repository diffs (Step 1) and external contribution metadata/PR details (Step 10).
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the diffs it processes.
- Capability inventory: The skill has the ability to write to files (
package.json,.re0/release/RELEASE_NOTES.local.md), commit code, create signed tags, and push to remote repositories. - Sanitization: No explicit sanitization or filtering of the content within the diffs or PR descriptions is mentioned before the agent uses this information to draft commit messages or release notes.
Audit Metadata