solidcraft-packaging
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute standard development and build commands including
cargo update,cargo xtask ci, andgh release edit. These are appropriate for the stated purpose of packaging and releasing software. - [DYNAMIC_EXECUTION]: The instructions include running a local shell script
scripts/fold-format-pending.sh. This is a standard procedure within a software repository for automation and does not involve untrusted external input. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests data from repository files.
- Ingestion points: Reads configuration and version data from
Cargo.tomlandCargo.lock. - Boundary markers: None specified in the instructions.
- Capability inventory: Includes file modification, shell script execution, and GitHub API interactions via the
ghCLI. - Sanitization: The skill includes security best practices such as verifying build integrity using
sha256sum --checkbefore publishing.
Audit Metadata