playwright-java-release
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes command-line utilities including
git,gh(GitHub CLI), andmvn(Maven), along with local project scripts likeset_maven_version.shandrender_release_notes.mjs. These executions are standard for release automation workflows. - Data Ingestion Surface: The skill retrieves the body of a GitHub issue from a specific repository (
microsoft/playwright-internal) to update a release checklist. This involves reading external content into the agent's context, which is a common pattern for status tracking tools. - File System Operations: The skill uses the
/tmp/directory to store and edit temporary files, such as release notes and issue bodies. This is a standard practice for managing transient data during multi-step automated processes.
Audit Metadata