solidcraft-packaging

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to execute standard development and build commands including cargo update, cargo xtask ci, and gh release edit. These are appropriate for the stated purpose of packaging and releasing software.
  • [DYNAMIC_EXECUTION]: The instructions include running a local shell script scripts/fold-format-pending.sh. This is a standard procedure within a software repository for automation and does not involve untrusted external input.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests data from repository files.
  • Ingestion points: Reads configuration and version data from Cargo.toml and Cargo.lock.
  • Boundary markers: None specified in the instructions.
  • Capability inventory: Includes file modification, shell script execution, and GitHub API interactions via the gh CLI.
  • Sanitization: The skill includes security best practices such as verifying build integrity using sha256sum --check before publishing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 06:38 PM