utility-pm-release-conductor
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local validation script (
scripts/pre-tag-validate.sh) to ensure code readiness before a release tag is applied. This represents standard software development lifecycle automation. - [DYNAMIC_EXECUTION]: On AI clients without native sub-agent support, the skill employs a "reference + execute inline" pattern. It reads system instructions from local files such as
agents/pm-skill-auditor.mdandagents/pm-changelog-curator.mdto emulate sub-agent behavior within a single context window. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data, including git logs and validation output, to generate release artifacts like CHANGELOGs. To mitigate risks associated with processing untrusted data, the skill enforces explicit boundary markers between gates and requires manual maintainer approval before performing critical actions like tagging or pushing code.
Audit Metadata