create-beta-tag
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common developer tools including
git,python,awk, andjust. These tools are used for repository state management and metadata parsing consistent with the skill's stated purpose of creating release tags. - [INDIRECT_PROMPT_INJECTION]: The skill accepts a release version string from the user. It mitigates potential command injection risks by applying strict regular expression validation (
^[0-9]+\.[0-9]+$) to ensure the input only contains numeric version components before it is used in shell variables. - [EXTERNAL_DOWNLOADS]: The skill interacts with an external Git remote named
upstreamviagit fetch,git pull, andgit push. These operations are fundamental to the skill's workflow and target the project's official source code repository. - [DYNAMIC_EXECUTION]: The skill employs
python -cto parseCargo.tomlfiles using the standard librarytomllibmodule. The Python scripts are static literals defined within the skill and do not incorporate unsanitized external data, posing no dynamic execution risk.
Audit Metadata