update-version
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local
gitandrg(ripgrep) commands to fetch repository history, read file contents from specific branches, identify differences between branches, and commit/push changes. These are standard operations for a repository management skill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources within the repository, specifically
packages/core/src/version.tsand file diffs inpackages/docs. - Ingestion points: Git history and file content from the
mainbranch and the currentHEADare read into the agent's context. - Boundary markers: There are no explicit delimiters or sanitization steps mentioned for the ingested version strings or diff lines.
- Capability inventory: The skill possesses the ability to commit and push changes to the remote repository.
- Sanitization: No specific sanitization or validation of the version string is defined, though the logic is narrowly focused on version number incrementation.
Audit Metadata