extract-version
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines pure parsing logic for semantic versioning. It uses standard regular expressions to extract components like major, minor, and patch numbers from input strings. No network operations, file system access, or sensitive data handling is performed.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to extract version numbers, which is a potential surface for indirect prompt injection.
- Ingestion points: The
versionStringinput parameter inSKILL.mdreceives external data. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the parsing instructions.
- Capability inventory: The skill has no requested tools or capabilities; it only outputs structured JSON data.
- Sanitization: The extraction logic relies on a strict regex pattern for semantic versioning, which naturally filters out non-matching malicious content.
Audit Metadata