update-version

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local git and rg (ripgrep) commands to fetch repository history, read file contents from specific branches, identify differences between branches, and commit/push changes. These are standard operations for a repository management skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources within the repository, specifically packages/core/src/version.ts and file diffs in packages/docs.
  • Ingestion points: Git history and file content from the main branch and the current HEAD are read into the agent's context.
  • Boundary markers: There are no explicit delimiters or sanitization steps mentioned for the ingested version strings or diff lines.
  • Capability inventory: The skill possesses the ability to commit and push changes to the remote repository.
  • Sanitization: No specific sanitization or validation of the version string is defined, though the logic is narrowly focused on version number incrementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 08:55 AM