agent-mobile-release-manager
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external data from Git commit history to generate changelogs for app store distributions (e.g., TestFlight and Play Store) via Fastlane's
changelog_from_git_commitsfunction. This represents an untrusted data ingestion point where malicious commit messages could attempt to influence the agent's behavior. - Ingestion points:
changelog_from_git_commitscall within thebetalane inSKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat this external content as untrusted data.
- Capability inventory: The skill includes capabilities for file system modification (
sedinscripts/bump-version.sh), network operations (Fastlane uploads), and CI/CD execution (GitHub Actions). - Sanitization: There is no evidence of filtering or sanitization of the commit messages before they are included in the deployment pipeline.
Audit Metadata