store-release
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a provided Python script (scripts/check_limits.py) and local project build commands to validate store metadata and versioning configuration.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources (the project's git history and documentation files) which are processed to generate release notes. The instructions mandate source-verification of all claims and a manual review hand-off to mitigate risks from malicious repo content.
Audit Metadata