skills/sharex/xerahs/publish-release/Gen Agent Trust Hub

publish-release

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various development tools including git, dotnet, and gh (GitHub CLI) to manage the release lifecycle. These commands are used for standard operations such as submodule synchronization, solution building, repository tagging, and GitHub release management.
  • [EXTERNAL_DOWNLOADS]: The skill performs remote operations such as git pull and git submodule update to synchronize the local environment with remote repositories. The instructions also mention the installation of the wix toolset via dotnet tool install, which is a well-known service for Windows installer creation.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to inspect GitHub Action logs to troubleshoot failures (gh run view --log). This constitutes a potential attack surface if the logs were to contain adversarial instructions generated by a compromised build process or external dependency.
  • Ingestion points: GitHub Action job logs fetched at runtime from run-release-sequence.sh.
  • Boundary markers: None implemented for the log inspection step.
  • Capability inventory: File system access, network operations via git/gh, and shell command execution.
  • Sanitization: No sanitization or filtering is performed on log content before the agent evaluates it for troubleshooting.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:34 AM