prepare-release
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands (git, npm, gh) to manage the repository state and trigger release workflows. These actions are restricted to the local project environment and the author's specified GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: Analyzes commit history to generate user-facing release notes. This ingestion of external data is mitigated by the agent's summarization process and the requirement for user review of the generated notes and version recommendation.
Audit Metadata