releasing-godot-prompter
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes a release workflow that involves running local maintenance scripts such as
node scripts/bump-version.mjsandnode scripts/count-tokens.mjs. These are standard developer operations for version management and documentation updates. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface where external input (version strings) is passed to scripts.
- Ingestion points: User-supplied version argument in
node scripts/bump-version.mjs <version>. - Boundary markers: None explicitly mentioned in the instructions, as it follows standard CLI patterns.
- Capability inventory: Execution of local scripts via
nodeand package installation vianpm ciinSKILL.md. - Sanitization: Relies on the local script's implementation to handle the input safely.
Audit Metadata