releasing-godot-prompter

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run a local script (node scripts/bump-version.mjs) to automate version updates in project manifest files.
  • [PROMPT_INJECTION]: The skill ingests data from local configuration files to synchronize versions across the project. 1. Ingestion points: package.json and .claude-plugin/plugin.json. 2. Boundary markers: Absent. 3. Capability inventory: Local script execution and file system modifications. 4. Sanitization: Not specified.
  • [SAFE]: The release sequence, including the use of environment variables for marketplace tokens and git tags for CI/CD triggers, follows established industry best practices for software automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 01:49 PM
Security Audit — agent-trust-hub — releasing-godot-prompter