git-tag
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
cyeam tagcommand to manage Git versions. It explicitly instructs the agent to error out on unsupported parameters and prohibits direct shell splicing, which mitigates command injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied arguments for versioning modes (e.g., minor, major, --dry-run). It implements safety boundaries by requiring strict parameter parsing and preventing the execution of arbitrary flags like
--forceunless they are part of the defined logic.
Audit Metadata