skills/replicate/cog/release-cog/Gen Agent Trust Hub

release-cog

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use git, gh, and mise to perform repository management tasks including version bumping, branch management, and release tagging.
  • [EXTERNAL_DOWNLOADS]: Includes instructions for using gh release download to fetch artifacts from GitHub for manual verification or emergency publishing.
  • [PROMPT_INJECTION]: The release orchestration process creates an attack surface for indirect prompt injection via project configuration files. 1. Ingestion points: Reads versioning and dependency information from VERSION.txt, Cargo.toml, and pyproject.toml. 2. Boundary markers: None; the instructions assume the local environment and project files are trusted by the user. 3. Capability inventory: The skill utilizes high-privilege operations including repository modification (git push), artifact distribution (gh release), and package publishing to PyPI and crates.io. 4. Sanitization: None; the tool follows standard developer-centric release automation patterns for the specific project it manages.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 05:20 PM