rhdh-release-schedule
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/release.pyand its supporting modules (_jira.py,rich_filter.py) execute shell commands viasubprocess.runto interact withacli(Atlassian CLI),gog(Google Workspace CLI), andgit. These executions are used to search Jira, retrieve spreadsheet data, and identify repository paths. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from shared resources (Jira issue descriptions and Google Sheets cells) to extract release dates and team metadata. This data is then used to formulate responses and Slack messages.
- Ingestion points: Jira issue descriptions parsed in
scripts/release.py; Google Sheets cell data fetched inscripts/release.py. - Boundary markers: Absent; data is processed and presented without specific delimiters to isolate potentially malicious embedded instructions.
- Capability inventory: Subprocess execution for CLI tools (
acli,gog,git) in multiple scripts. - Sanitization: Release versions are normalized via regex (
\d+\.\d+), but the parsing logic for milestone dates in issue descriptions relies on general regex matching which does not fully sanitize the input text. - [EXTERNAL_DOWNLOADS]: The skill retrieves data from well-known external services including
issues.redhat.com(Jira) anddocs.google.com(Google Sheets). These references target official project resources associated with the developer.
Audit Metadata