version-bump
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from commit logs and GitHub metadata to generate release notes, creating an indirect prompt injection surface.
- Ingestion points: The skill reads data from
git logandgh pr viewoutput (SKILL.md). - Boundary markers: Absent; no instructions are provided to the agent to delimit or ignore potentially malicious instructions embedded within the retrieved commit metadata.
- Capability inventory: The skill possesses the ability to write to files and execute shell commands (
git,uv,gh). - Sanitization: Absent; external content from git history is not sanitized before being interpolated into documentation templates.
- [COMMAND_EXECUTION]: The skill requires the execution of multiple CLI tools to manage the repository and fetch data, which is necessary for its stated purpose but represents a significant capability.
- Evidence: The instructions include running
git log,uv sync,gh api, andgh release createto manage the release process.
Audit Metadata