changelog
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git commands (
git log,git tag,git describe) and GitHub CLI commands (gh release) to interact with the local repository and GitHub API for release management. All operations are local to the project context. - [EXTERNAL_DOWNLOADS]: Instructions include installing official tools from trusted sources:
brew install gh(Homebrew) andpip install google-generativeai(PyPI). These are standard package managers for established developer tools. - [CREDENTIALS_UNSAFE]: The skill references an environment variable
GEMINI_API_KEY. It correctly instructs the user to set this variable manually and uses a placeholder (your_api_key), which is a recommended security practice for handling secrets rather than hardcoding them.
Audit Metadata