skills/sharex/xerahs/run-maintenance/Gen Agent Trust Hub

run-maintenance

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various git commands (git status, git pull, git submodule) and dotnet build to manage the repository state and verify changes. These are standard operations for development maintenance.\n- [PRIVILEGE_ESCALATION]: The skill utilizes the powershell -ExecutionPolicy Bypass flag to run a local script for changelog updates. While this bypasses local execution policies, it is a standard mechanism for running automation scripts bundled within a project repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from Directory.Build.props and command-line output from git tag. This represents an attack surface for indirect prompt injection, although the risk is minimized by the use of targeted regular expressions to extract specific version data.\n
  • Ingestion points: Directory.Build.props file content and git tag output.\n
  • Boundary markers: None explicitly implemented.\n
  • Capability inventory: Shell command execution (git, dotnet) and local PowerShell script execution.\n
  • Sanitization: Employs regex to isolate specific version strings within XML tags.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:34 AM