npm-publish
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several shell commands such as npm install, npm test, npm outdated, npm audit, npm pack, and git log to manage the release process. These are standard operations for its intended purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a vulnerability surface for indirect prompt injection attacks. Ingestion points: The skill ingests untrusted data from the output of the git log command and the existing CHANGELOG.md file (Step 3b). Boundary markers: There are no explicit delimiters or specific instructions to the agent to ignore instructions embedded within the git commit messages. Capability inventory: The skill has significant capabilities including executing arbitrary project scripts via npm test, installing packages via npm install, and writing to the local file system. Sanitization: There is no evidence of filtering or sanitizing the content of commit messages before they are processed or written to the changelog.
Audit Metadata