rota-release
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of local command-line tools to perform its tasks.\n
- Executes
gitcommands for repository state checks, committing changes, tagging versions, and pushing to remote origins.\n - Uses the
rotaCLI for specialized release operations, version calculations, and changelog management.\n - Invokes
ghandglabCLI utilities to interact with GitHub and GitLab for publishing release notes and assets.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could potentially contain malicious instructions intended to influence the agent.\n - Ingestion points: Fetches commit history via
gitand issue descriptions from tracking systems to generate automated release notes (SKILL.md, Step 5). It also reads a project-level checklist file (.rota/RELEASE.md) in Step 2.\n - Boundary markers: Includes a mandatory human review step (Step 6) where the agent presents the drafted notes for verification and approval before any destructive or remote actions (tagging, pushing, publishing) are taken.\n
- Capability inventory: The skill has permissions to write to the local filesystem (CHANGELOG, version files), commit to Git, and push tags/releases to remote servers via authenticated CLI tools.\n
- Sanitization: External content from commits and issues is processed directly by the model for summarization without explicit filtering or sanitization steps mentioned in the instructions.
Audit Metadata