release-cog
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
git,gh, andmiseto perform repository management tasks including version bumping, branch management, and release tagging. - [EXTERNAL_DOWNLOADS]: Includes instructions for using
gh release downloadto fetch artifacts from GitHub for manual verification or emergency publishing. - [PROMPT_INJECTION]: The release orchestration process creates an attack surface for indirect prompt injection via project configuration files. 1. Ingestion points: Reads versioning and dependency information from
VERSION.txt,Cargo.toml, andpyproject.toml. 2. Boundary markers: None; the instructions assume the local environment and project files are trusted by the user. 3. Capability inventory: The skill utilizes high-privilege operations including repository modification (git push), artifact distribution (gh release), and package publishing to PyPI and crates.io. 4. Sanitization: None; the tool follows standard developer-centric release automation patterns for the specific project it manages.
Audit Metadata