release-automation-builder
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill automates the generation of changelogs and GitHub release notes based on Git commit history.
- Ingestion points: Data enters the release process through Git commit messages and pull request titles parsed by automation tools in
SKILL.md. - Boundary markers: The provided templates do not include explicit instructions or markers to distinguish between data content and instructions when processing commit messages.
- Capability inventory: The skill facilitates file system writes (updating
CHANGELOG.mdandpackage.json), Git operations (tagging and committing), and network operations (publishing to NPM and Docker Hub). - Sanitization: There is no explicit sanitization or escaping demonstrated in the configuration for handling potentially malicious markdown or instructions embedded in commit messages.
Audit Metadata