git-release-tagging
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of documentation, policy references, and Markdown templates. There are no executable scripts, binaries, or configuration files included.
- [INDIRECT_PROMPT_INJECTION]: The skill workflow involves processing Git commit history to generate release notes, which is a surface for indirect prompt injection.
- Ingestion points: Git commit range and history (SKILL.md, Step 4).
- Boundary markers: None specified.
- Capability inventory: Git tagging and release notes drafting.
- Sanitization: None mentioned.
- [SAFE]: The skill instructions focus on standard version control practices and do not request access to sensitive local files, environment variables, or external network resources.
Audit Metadata