patch-release
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (GitHub issues), creating a surface for potential manipulation.
- Ingestion points: Data is pulled via
gh issue listas described inSKILL.md. - Boundary markers: The skill does not define specific delimiters for separating issue content from instructions.
- Capability inventory: Capabilities include
gitlogging/versioning andghissue/release management. - Sanitization: No explicit sanitization or filtering of external issue content is performed.
- [COMMAND_EXECUTION]: The skill utilizes standard
gitandghCLI commands to interact with the repository's history and issue tracker. These are standard development tools used for their intended purpose.
Audit Metadata