antigravity-maintainer-batch-release
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill automates repository maintenance through local shell commands, specifically using
npm runscripts for merging batches (npm run merge:batch), validating repository state (npm run validate), and handling releases (npm run release:prepare,npm run release:publish). These operations are restricted to the maintainer's local environment and follow a strictly defined execution contract. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and evaluate untrusted content from external Pull Requests, which presents a surface for indirect prompt injection.
- Ingestion points: Source code, metadata files (
SKILL.md), and PR discussions within theskills/andplugins/subdirectories. - Boundary markers: The instructions explicitly mandate that legacy executable-mode files must be treated only as non-executable data snapshots to prevent unintended execution.
- Capability inventory: The skill possesses the capability to modify the repository state via Git and execute arbitrary project-defined scripts via
npm. - Sanitization: The skill mitigates risks by requiring multiple automated validation steps (
npm run security:docs,npm run validate:references) and mandatory manual semantic review tied to a verified commit SHA.
Audit Metadata