run-maintenance
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various git commands (
git status,git pull,git submodule) anddotnet buildto manage the repository state and verify changes. These are standard operations for development maintenance.\n- [PRIVILEGE_ESCALATION]: The skill utilizes thepowershell -ExecutionPolicy Bypassflag to run a local script for changelog updates. While this bypasses local execution policies, it is a standard mechanism for running automation scripts bundled within a project repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data fromDirectory.Build.propsand command-line output fromgit tag. This represents an attack surface for indirect prompt injection, although the risk is minimized by the use of targeted regular expressions to extract specific version data.\n - Ingestion points:
Directory.Build.propsfile content andgit tagoutput.\n - Boundary markers: None explicitly implemented.\n
- Capability inventory: Shell command execution (git, dotnet) and local PowerShell script execution.\n
- Sanitization: Employs regex to isolate specific version strings within XML tags.
Audit Metadata