release-prepare
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sedto modify sensitive project configuration files (project.pbxproj) to update marketing and build versions across multiple targets. - [COMMAND_EXECUTION]: It leverages the
asc(App Store Connect) command-line tool to perform administrative tasks, including metadata updates and app submission. - [COMMAND_EXECUTION]: It uses
gitand the GitHub CLI (gh) for repository management, branching, merging, and creating annotated release tags. - [DYNAMIC_EXECUTION]: The skill executes an inline Python script using a heredoc to process and generate localized JSON metadata files from markdown sources.
- [DYNAMIC_EXECUTION]: It invokes
npm run buildto update and verify the deployment of the application's website changelog component. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes external markdown files (running changelogs and feature notes) to populate App Store release notes and in-app What's New content, which represents a potential ingestion surface for untrusted data.
Audit Metadata