release-bump

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses several command-line tools including git (for status, add, commit, and tagging), gh (GitHub CLI for authentication checks and release editing), grep (to read configuration), and bumpversion.
  • [EXTERNAL_DOWNLOADS]: The skill mentions the bumpversion Python package as a prerequisite. This is a well-established utility for managing version strings in project files.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads data from the [Unreleased] section of CHANGELOG.md.
  • Ingestion points: Reads existing changelog content from CHANGELOG.md.
  • Boundary markers: None explicitly defined for the changelog content.
  • Capability inventory: The skill has capabilities to write to the file system (via sed or direct file writes for the changelog) and execute shell commands (git, bumpversion).
  • Sanitization: The skill moves existing text into a new version header without sanitization, but the scope of use for this content is restricted to documentation and Git metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 08:50 PM