create-beta-tag

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard git commands such as fetch, tag, and push to manage repository versions. These operations are aligned with the skill's stated purpose of automating release tagging for the NeMo Relay project.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs including BASE_VERSION and BETA_NUMBER. It implements validation using regular expressions to ensure inputs conform to expected SemVer patterns before they are interpolated into shell commands.
  • [DATA_EXFILTRATION]: The skill performs network operations via git push. However, this is limited to pushing specific tag references to the upstream repository, which is consistent with the project's developer workflow and the author's identity.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 05:19 PM
Security Audit — agent-trust-hub — create-beta-tag