bump-required-versions
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
make checkfrom the repository root to verify that manual version bumps are coherent with the project's test suite. This is a standard and expected operation for developer tooling. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it ingests user-provided version strings and interpolates them directly into source code files.
- Ingestion points: User-supplied version numbers provided via natural language interaction (e.g., "bump pipelex to 0.24.0").
- Boundary markers: Absent; user input is directly requested and processed without explicit isolation or "ignore instructions" delimiters for the interpolated data.
- Capability inventory: Modifies source files (
src/agent/plugin-version.ts,src/agent/binaries.ts) and executes shell commands (make check). - Sanitization: Includes a sanity check to verify the new version is strictly greater than the current floor, which provides basic validation but may not prevent complex code injection if the agent does not strictly enforce semver formatting before writing to disk.
Audit Metadata