mobile-release
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands using
gitandpnpmto manage the release workflow, including fetching tags, bumping versions, and creating pull requests. These are standard operations for a release management tool. - [PROMPT_INJECTION]: The skill processes commit messages to draft a changelog. While commit messages are external inputs that represent an indirect prompt injection surface, the risk is mitigated by a mandatory human-in-the-loop step where the agent waits for user confirmation or edits before writing the changelog to the filesystem.
Audit Metadata