utility-pm-release-conductor
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via Bash for core release operations, including git tagging and pushing, and running a local validation script (
scripts/pre-tag-validate.sh). This is the intended primary purpose of the skill. - [DYNAMIC_EXECUTION]: The skill implements a "reference + execute inline" pattern where it reads external files (e.g.,
agents/pm-release-conductor.md) and instructs the agent to adopt the content as its operating instructions. This runtime loading of instructions enables cross-client compatibility for complex release logic. - [INDIRECT_PROMPT_INJECTION]: The skill acts as an ingestion surface for untrusted data by processing repository files such as CHANGELOGs and third-party sub-agent definitions. However, the risk is mitigated by explicit gate boundaries that require human maintainer confirmation before proceeding to any impactful action (e.g., version bumps or tagging).
Audit Metadata