create-beta-tag

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes common developer tools including git, python, awk, and just. These tools are used for repository state management and metadata parsing consistent with the skill's stated purpose of creating release tags.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts a release version string from the user. It mitigates potential command injection risks by applying strict regular expression validation (^[0-9]+\.[0-9]+$) to ensure the input only contains numeric version components before it is used in shell variables.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with an external Git remote named upstream via git fetch, git pull, and git push. These operations are fundamental to the skill's workflow and target the project's official source code repository.
  • [DYNAMIC_EXECUTION]: The skill employs python -c to parse Cargo.toml files using the standard library tomllib module. The Python scripts are static literals defined within the skill and do not incorporate unsanitized external data, posing no dynamic execution risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 05:20 PM