release-check
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions mandate reading and following a process document located at
docs/process/release-process.md. This creates a surface where instructions within that external file could influence the agent's actions during the release process. - Ingestion points: The agent reads
docs/process/release-process.mdfrom the local disk into its active context. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested document; it explicitly tells the agent to follow it 'top to bottom'.
- Capability inventory: The skill is intended to perform sensitive actions including version selection, file modification, git tagging, and creating GitHub Releases.
- Sanitization: There is no mention of escaping, validation, or filtering of the process document content before it is processed by the agent.
Audit Metadata