bump-version-dev
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local shell scripts (
scripts/dev-install.sh,scripts/build-bridge.sh,scripts/build.sh,scripts/release-artifacts.sh) to build APKs, compile binaries, and stage artifacts. - [COMMAND_EXECUTION]: It performs system-level modifications by backing up existing binaries and creating symlinks to point the user's PATH to the newly built development version.
- [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface by reading and parsing git commit messages from
git logto determine versioning logic. - Ingestion points: Git commit history (
git log) is read into the context to calculate version bumps. - Boundary markers: None; there are no delimiters or warnings to the agent to ignore instructions that might be embedded in commit messages.
- Capability inventory: The skill has the capability to execute shell commands, build software, and modify local binaries.
- Sanitization: No sanitization or filtering of commit message content is implemented before the agent evaluates them for versioning.
Audit Metadata