verify-release
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from untrusted external sources, including deployment configurations, release manifests, issue trackers, and live telemetry logs. This creates an attack surface where malicious instructions hidden in these external sources could attempt to influence the agent's behavior during the verification process.
- Ingestion points: The skill recovers context from external trackers, handoffs, deployment manifests, and live version endpoints in the target environment (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or security boundaries to isolate untrusted data from the agent's core instructions.
- Capability inventory: The skill utilizes existing project CLI tools, API probes, and browser-based test suites to perform its tasks (SKILL.md).
- Sanitization: There are no explicit instructions for sanitizing, escaping, or validating the content retrieved from external sources before the agent processes it.
Audit Metadata