prepare-release
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes repository management commands (git, gh) and a bundled Python script to automate the release workflow.
- [EXTERNAL_DOWNLOADS]: Fetches pull request information from GitHub's API via the gh CLI tool to facilitate automated changelog updates.
- [PROMPT_INJECTION]: The skill processes the repository's CHANGELOG.md file to identify content needing metadata backfilling, which represents an indirect prompt injection surface.
- Ingestion points: The prepare_changelog.py script reads the local CHANGELOG.md file for parsing.
- Boundary markers: The script uses defined Markdown headers (e.g., [Unreleased]) and HTML comment markers to identify relevant content blocks.
- Capability inventory: The skill has access to file system read/write, shell command execution, and remote repository push permissions.
- Sanitization: Implements strict regex validation for the release version input (e.g., v9.6.0) and uses structured JSON for mapping pull request data.
Audit Metadata