git-release
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements strong safety protocols for high-consequence operations, such as requiring a clean working directory and explicit user confirmation before pushing changes.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests commit messages to generate a changelog, which represents a potential injection surface.
- Ingestion points: Git commit history retrieved via
git log. - Boundary markers: Entries are structured as Markdown bullet points within a preview summary.
- Capability inventory: Filesystem writes to version files and
CHANGELOG.md, Git operations (git commit,git push), and GitHub API interactions (gh release create). - Sanitization: The skill does not explicitly sanitize commit subjects or bodies, but the risk is mitigated by a mandatory Phase 4 manual review where the full changelog preview is displayed to the user for approval before execution.
Audit Metadata