gh-oss-release-prep
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from the repository and sibling directories to automate file creation and configuration updates.\n
- Ingestion points: Reads local repository files (e.g., README.md, go.mod, package.json) and sibling directories (ls ../) to identify project type and existing conventions.\n
- Boundary markers: The skill does not define specific delimiters or instructions to ignore potential commands embedded within the analyzed files.\n
- Capability inventory: The skill can perform git commit, git push, and execute shell commands for linting (golangci-lint), testing (go test), and installing tools (go install).\n
- Sanitization: There is no explicit sanitization or filtering of the content read from the repository files before it is processed or used in shell commands.\n- [EXTERNAL_DOWNLOADS]: Fetches and installs development tools and GitHub Actions from trusted organizations and well-known services.\n
- Installs the go-licenses tool from Google's official GitHub repository.\n
- Uses official GitHub Actions for checkout and Go environment setup.\n
- Utilizes the golangci-lint-action and goreleaser-action from well-known community-maintained repositories.\n- [COMMAND_EXECUTION]: Executes shell commands to perform repository management and code quality tasks.\n
- Runs git commit, git push, and git tag for version control management.\n
- Executes golangci-lint and go test to verify code quality and functionality.
Audit Metadata