release-bump
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several command-line tools including
git(for status, add, commit, and tagging),gh(GitHub CLI for authentication checks and release editing),grep(to read configuration), andbumpversion. - [EXTERNAL_DOWNLOADS]: The skill mentions the
bumpversionPython package as a prerequisite. This is a well-established utility for managing version strings in project files. - [INDIRECT_PROMPT_INJECTION]: The skill reads data from the
[Unreleased]section ofCHANGELOG.md. - Ingestion points: Reads existing changelog content from
CHANGELOG.md. - Boundary markers: None explicitly defined for the changelog content.
- Capability inventory: The skill has capabilities to write to the file system (via
sedor direct file writes for the changelog) and execute shell commands (git,bumpversion). - Sanitization: The skill moves existing text into a new version header without sanitization, but the scope of use for this content is restricted to documentation and Git metadata.
Audit Metadata