bump-aspire-version

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • Command Execution: The skill utilizes shell commands to inspect repository history and perform file modifications. These operations, including git log, git show, and dotnet run, are consistent with the skill's intended purpose of managing version updates within a development workflow.
  • Dynamic Execution via Scripting: The skill executes a bundled C# script (BumpVersion.cs) to perform deterministic file edits. This approach is used instead of generating ad-hoc code, providing a more predictable execution path. The script includes logic to validate input formats for versions, branch names, and milestones using regular expressions before applying changes to eng/Versions.props and GitHub policy files.
  • Repository Modification: The skill is designed to modify specific configuration files and create pull requests. While this involves write access to the repository, the instructions emphasize manual validation steps, such as reviewing git diff, to ensure only intended changes are committed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:53 PM