skills/mono0926/skills/release-pub/Gen Agent Trust Hub

release-pub

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard development tools including git for version control, gh (GitHub CLI) for release management, and dart/flutter for testing and analysis. These operations are restricted to the local repository and official release APIs.
  • [EXTERNAL_DOWNLOADS]: The skill references the official dart-lang/setup-dart GitHub Action workflow for automated publishing. This is a trusted resource provided by the Dart maintainers.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads project commit history (git log) and pubspec.yaml to generate release notes. This data ingestion is handled within the context of generating documentation and is used to populate release metadata via local files, minimizing injection risks to the shell environment.
  • [SAFE]: All external resource references, such as the pedantic_mono package and the release_helper script, are either official Dart ecosystem components or vendor-owned resources that align with the skill's stated purpose without exhibiting malicious patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:59 AM