pooled-release
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official GitHub Actions and the well-known semantic-release utility to automate release processes. No unauthorized or suspicious third-party dependencies are introduced.
- [SAFE]: Access to sensitive credentials like GITHUB_TOKEN and NPM_TOKEN is managed through the standard GitHub Actions secrets mechanism, which is the recommended security practice for CI/CD pipelines.
- [SAFE]: Analysis of the provided templates and documentation confirms the absence of prompt injection, obfuscation techniques, or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill sets up a pipeline that processes Git commit messages to automate releases. While this is an ingestion point for external data, the risk is mitigated as the processing is performed by established tools rather than the AI agent itself. * Ingestion points: Git commit messages analyzed by semantic-release in templates/release-on-demand.yml. * Boundary markers: None explicitly defined in the templates. * Capability inventory: npx semantic-release in templates/release-on-demand.yml has permissions to tag, release, and publish to registries. * Sanitization: Relies on the default behavior of semantic-release plugins.
Audit Metadata