workflow-release-prep
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill's instructions or logic.
- [COMMAND_EXECUTION]: The skill utilizes standard, well-defined git commands (
git status,git diff,git add,git push) to manage the development workflow. These commands are restricted to the local repository context. - [DATA_EXPOSURE]: The skill incorporates a proactive security stance by directing the agent to search for and exclude secrets, keys, and environment files (
.env) from the release aggregate. It specifically references aplan-secrets-audittask if sensitive data is suspected. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted content from the local file system (via
git diff), it mitigates risks by employing multiple review phases, a self-critique rubric, and delegating to anaudit-code-reviewspecialist skill. The workflow is designed to ensure human oversight before final merge-ready status is reached.
Audit Metadata