release-prep
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bashto execute shell commands for Git operations (tagging, pushing), build management (uv), and interacting with the GitHub API (gh). These actions are core to its purpose of release automation. - [DYNAMIC_EXECUTION]: Multiple blocks of inline Python code are executed using the `python3
- <<'PY'` pattern. These scripts handle complex logic such as version number parsing, PEP 440 compliance checking, and state verification before and after the release.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository (e.g.,
pyproject.toml,CHANGELOG.md) and user-supplied version strings. - Ingestion points: User-provided
RELEASE_VERSIONenvironment variable and local project files. - Boundary markers: Explicit instructions require the agent to stop and wait for manual user approval after presenting the proposed release plan.
- Capability inventory: File writes (
pyproject.toml,CHANGELOG.md), network operations (git push,gh run), and subprocess calls. - Sanitization: The skill uses strict regular expression validation in Python to ensure the version string follows expected formats before processing.
Audit Metadata