release-manager
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The core scripts (
changelog_generator.py,version_bumper.py, andrelease_planner.py) exclusively use the Python standard library, eliminating external dependency risks. - [SAFE]: Input parsing for git logs and JSON plans is performed using structured regular expressions and standard JSON libraries without any dynamic code execution (e.g.,
evalorexec). - [SAFE]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network operations was found in the scripts or documentation.
- [SAFE]: Integration examples provided in the documentation (using libraries like
requestsfor GitHub API or Slack webhooks) are standard industry practices and use clear placeholders for user configuration. - [SAFE]: The skill correctly handles external data by treating it as input for parsing and reporting, with no dangerous capability paths triggered by the processed content.
Audit Metadata