dev
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill uses standard development tools including
git,npm,node, and the GitHub CLI (gh) to perform maintenance tasks. These commands are used to manage versioning, synchronize repository metadata, and automate the release process within the local environment. - Indirect Prompt Injection Surface: During release preparation, the skill fetches content from pull requests and issues using the GitHub CLI to generate release notes. While this involves processing external data, the skill uses this information for text generation rather than execution, which is a common pattern in documentation workflows.
- Local Script Execution: The workflow involves running a local maintenance script (
scripts/update.js) to keep skill definitions in sync with the core library. This is a standard utility for maintaining consistency across the repository's components.
Audit Metadata