zentao-release

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill is a documentation-focused extension for ZenTao release management, utilizing the author's official CLI tool. It does not perform any suspicious network operations or unauthorized file access.
  • [COMMAND_EXECUTION]: The skill uses the zentao-cli command-line utility to interact with ZenTao. The operations are restricted to listing and getting release information as specified in the commands section.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from ZenTao releases, creating a potential surface for indirect prompt injection if external fields contain malicious instructions.
  • Ingestion points: zentao-cli release list and zentao-cli release get outputs as described in SKILL.md and reference files.
  • Boundary markers: None present in the documentation to delimit external data from instructions.
  • Capability inventory: Execution of zentao-cli for data retrieval and listing.
  • Sanitization: No sanitization of ingested release metadata is specified.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 08:39 AM
Security Audit — agent-trust-hub — zentao-release