zentao-release
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a documentation-focused extension for ZenTao release management, utilizing the author's official CLI tool. It does not perform any suspicious network operations or unauthorized file access.
- [COMMAND_EXECUTION]: The skill uses the
zentao-clicommand-line utility to interact with ZenTao. The operations are restricted to listing and getting release information as specified in the commands section. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from ZenTao releases, creating a potential surface for indirect prompt injection if external fields contain malicious instructions.
- Ingestion points:
zentao-cli release listandzentao-cli release getoutputs as described in SKILL.md and reference files. - Boundary markers: None present in the documentation to delimit external data from instructions.
- Capability inventory: Execution of
zentao-clifor data retrieval and listing. - Sanitization: No sanitization of ingested release metadata is specified.
Audit Metadata