release-process
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several Git commands (
git branch,git status,git pull,git log,git diff,git commit,git tag,git push) to automate the release process. These operations are essential to the skill's primary function as a release manager and are executed within the expected scope of the repository. - [PROMPT_INJECTION]: The skill is designed to process external, untrusted data by analyzing Git commit messages and code changes to calculate the next version number. While this is an ingestion point for potentially malicious instructions (Indirect Prompt Injection), the skill restricts its analysis to semantic versioning patterns (e.g., looking for 'feat:', 'fix:', or 'BREAKING CHANGE'), which mitigates the risk of the agent executing embedded commands.
- [EXTERNAL_DOWNLOADS]: The skill references a local dependency at
skills/changelog/SKILL.md. This is a internal reference within the skill set and does not involve downloading code from external or untrusted sources.
Audit Metadata