release-engineering
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process external data sources such as package metadata, installers, and changelogs, which creates an attack surface for indirect prompt injection.\n
- Ingestion points: Package metadata, installer files, and changelog entries (SKILL.md).\n
- Boundary markers: Absent. The skill does not provide specific instructions to use delimiters or ignore instructions found within the processed files.\n
- Capability inventory: The skill allows git operations (commit, tag, push) and execution of verification tests or dependency audits based on the state of these files (SKILL.md).\n
- Sanitization: Absent. There are no instructions for sanitizing or validating the content of the external files before the agent acts upon them.
Audit Metadata