release-management
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill documentation includes a utility script example for downloading and installing releases that uses
sudo mvto relocate binaries to/usr/local/bin/. While a standard administrative task for software installation, it involves elevated permissions. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of release notes and descriptions from GitHub via
gh release viewandgh release list. This content is externally controlled and could potentially contain instructions aimed at the agent. - Ingestion points: SKILL.md (via
gh release viewandgh release listcommands). - Boundary markers: Absent in the provided command examples.
- Capability inventory: File system access, shell execution (
gh,git,curl), and privilege escalation (sudo). - Sanitization: Not present in the instructional examples.
Audit Metadata