publish-release
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
ghCLI for listing and creating GitHub releases, and usesgit(via diffing) to manage release body updates. It explicitly mandates using--draftto prevent accidental publications. - [REMOTE_CODE_EXECUTION]: The skill extracts C# code blocks from markdown documentation and builds them in a temporary project. This dynamic execution is a standard functional step to ensure the validity of SDK documentation.
- [PROMPT_INJECTION]: The skill processes content from PR descriptions and markdown files, which represents an indirect prompt injection surface.
- Ingestion points: Pull request metadata and README files (SKILL.md Step 3 and Step 5).
- Boundary markers: None explicitly implemented; safety relies on the PR being previously merged into a trusted branch.
- Capability inventory: File system modification for test projects and execution of the
ghcommand-line tool. - Sanitization: The skill does not implement specific sanitization or escaping for the extracted code snippets or PR text.
Audit Metadata