release
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Orchestrates the release process by executing shell commands such as
gitfor repository management,ghfor GitHub API interactions,securityfor keychain identity verification, andxcrunfor Apple notarization. It also drives local repository scripts (scripts/local-release.sh,scripts/build.sh,scripts/build-bridge.sh). - [EXTERNAL_DOWNLOADS]: Clones the author's official Homebrew tap repository (
git@github.com:lycorp-jp/homebrew-tap.git) to manage software distribution. - [PROMPT_INJECTION]: Processes commit messages and pull request titles to generate a CHANGELOG, which represents a surface for indirect prompt injection.
- Ingestion points: Commit history retrieved via
git log. - Boundary markers: Implements a mandatory user confirmation gate in Step 3 to review all changes before execution.
- Capability inventory: Includes file modification, local script execution, and remote repository pushing.
- Sanitization: Relies on human review during the confirmation step rather than automated content filtering.
Audit Metadata