publish-release
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various development tools including
git,dotnet, andgh(GitHub CLI) to manage the release lifecycle. These commands are used for standard operations such as submodule synchronization, solution building, repository tagging, and GitHub release management. - [EXTERNAL_DOWNLOADS]: The skill performs remote operations such as
git pullandgit submodule updateto synchronize the local environment with remote repositories. The instructions also mention the installation of thewixtoolset viadotnet tool install, which is a well-known service for Windows installer creation. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inspect GitHub Action logs to troubleshoot failures (
gh run view --log). This constitutes a potential attack surface if the logs were to contain adversarial instructions generated by a compromised build process or external dependency. - Ingestion points: GitHub Action job logs fetched at runtime from
run-release-sequence.sh. - Boundary markers: None implemented for the log inspection step.
- Capability inventory: File system access, network operations via
git/gh, and shell command execution. - Sanitization: No sanitization or filtering is performed on log content before the agent evaluates it for troubleshooting.
Audit Metadata