release-prep

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses bash to execute shell commands for Git operations (tagging, pushing), build management (uv), and interacting with the GitHub API (gh). These actions are core to its purpose of release automation.
  • [DYNAMIC_EXECUTION]: Multiple blocks of inline Python code are executed using the `python3
  • <<'PY'` pattern. These scripts handle complex logic such as version number parsing, PEP 440 compliance checking, and state verification before and after the release.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository (e.g., pyproject.toml, CHANGELOG.md) and user-supplied version strings.
  • Ingestion points: User-provided RELEASE_VERSION environment variable and local project files.
  • Boundary markers: Explicit instructions require the agent to stop and wait for manual user approval after presenting the proposed release plan.
  • Capability inventory: File writes (pyproject.toml, CHANGELOG.md), network operations (git push, gh run), and subprocess calls.
  • Sanitization: The skill uses strict regular expression validation in Python to ensure the version string follows expected formats before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:18 PM