ort-release-notes
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The instructions utilize PowerShell to run a local script (
compile_contributors.py) andgit log. This is a common pattern for gathering repository metadata and does not involve external downloads or suspicious execution methods. - [Data Ingestion Consideration]: The skill drafts content based on pull request metadata retrieved from
detail.csv. As pull request titles and descriptions are provided by external contributors, they represent a surface for indirect prompt injection. The skill incorporates this data into a markdown draft, which is a standard procedure for release note automation. - [Local File Access]: The skill reads and writes to a user-defined or preset-defined output directory. It specifically accesses
presets.json,VERSION_NUMBER, and generated artifacts likedetail.csv. This behavior is scoped to the release note generation process.
Audit Metadata