skills/n0an/vivadicta/release-prepare/Gen Agent Trust Hub

release-prepare

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses sed to modify sensitive project configuration files (project.pbxproj) to update marketing and build versions across multiple targets.
  • [COMMAND_EXECUTION]: It leverages the asc (App Store Connect) command-line tool to perform administrative tasks, including metadata updates and app submission.
  • [COMMAND_EXECUTION]: It uses git and the GitHub CLI (gh) for repository management, branching, merging, and creating annotated release tags.
  • [DYNAMIC_EXECUTION]: The skill executes an inline Python script using a heredoc to process and generate localized JSON metadata files from markdown sources.
  • [DYNAMIC_EXECUTION]: It invokes npm run build to update and verify the deployment of the application's website changelog component.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external markdown files (running changelogs and feature notes) to populate App Store release notes and in-app What's New content, which represents a potential ingestion surface for untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:54 AM