release
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious behavior detected. The skill implements standard DevOps workflows using official utilities (git, gh). All shell commands and logic are transparent and consistent with the described purpose of managing releases.
- [PROMPT_INJECTION]: An indirect prompt injection surface exists as the skill processes external repository data.
- Ingestion points: Existing pull request descriptions are retrieved using
gh pr viewand commit hashes viagit log. - Boundary markers: No explicit delimiters or warnings are used when interpolating retrieved data into new pull request bodies.
- Capability inventory: The skill has access to the
Bashtool to executegitandghoperations. - Sanitization: No explicit sanitization or escaping of the fetched repository content is performed before it is used in subsequent command execution.
Audit Metadata