aicr-release-notes
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes a local script (tools/changelog) and official tools (gh) within the expected repository context to perform its functions.
- [COMMAND_EXECUTION]: The skill executes local commands to process commit history and fetch release metadata. These actions are aligned with the skill's primary purpose of drafting release announcements.
- [EXTERNAL_DOWNLOADS]: The skill retrieves previous release descriptions from GitHub to ensure stylistic consistency. This targets a well-known service and the vendor's own official assets.
- [DATA_EXFILTRATION]: No exfiltration of sensitive data was detected. The drafted content is saved to a local temporary file ($TMPDIR/aicr-release-notes.md) for manual user review.
Audit Metadata