update-os-packages
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Invokes the
release-notescommand-line utility to perform verification of package names against external distribution repositories. - [PROMPT_INJECTION]: Processes external data from
os-packages.jsonandsupported-os.jsonfiles, creating a surface for indirect prompt injection. - Ingestion points: Data is read from JSON files located within the
release-notes/directory of the user-specifieddotnet/corerepository. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from interpreting instructions that might be embedded within the processed JSON files.
- Capability inventory: The skill has the capability to modify local files via the
edittool, execute shell commands, and perform git commits. - Sanitization: Implements a post-modification validation step that uses
Dotnet.Release.Supportlogic to ensure the integrity of the updated JSON files.
Audit Metadata