release-and-changeset-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interact with and process data from external GitHub issues and pull requests, which introduces a potential attack surface for indirect instructions.
- Ingestion points: Processes content from user-provided GitHub issues and local worktrees during the bug-fixing and release cycle (SKILL.md, references/issue-fix-checklist.md).
- Boundary markers: The instructions do not specify any delimiters or safety prompts to prevent the agent from executing instructions potentially embedded in external issue data.
- Capability inventory: The skill utilizes shell-based tools including git, pnpm, node, and repoctl to modify the repository and perform releases (SKILL.md).
- Sanitization: No explicit sanitization or validation of untrusted input from issues is described.
- [COMMAND_EXECUTION]: The skill documents the use of various command-line utilities for maintaining the project.
- Evidence: References the use of pnpm change, git worktree, node --import tsx scripts/check-create-weapp-vite-changeset.ts, and internal repo release commands (SKILL.md, references/release-checklist.md). These are legitimate tools for the intended development workflow.
Audit Metadata