ship
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages the execution of git and repository management CLI tools (gh, glab) to automate pushing code and creating releases. This is part of its core functionality for developer workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local repository (git logs, status, PR lists) to generate documentation. This surface is mitigated by mandatory human review and explicit confirmation before any side-effect actions are performed. Ingestion points include repository history and metadata, while capabilities involve remote write operations. Boundary markers are present in the form of a required approval step before any execution.
Audit Metadata