release-notes
Fail
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local repository scripts and build tools, including
./scripts/test.sh,make build, andgo test, to verify the release state. It also runs a local helper scriptscripts/post-reactions.shto automate GitHub API calls.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data fromgit logand commit message bodies (Ingestion points). It lacks explicit boundary markers to delimit this external content (Boundary markers). The skill possesses capabilities for shell execution and GitHub repository modifications (Capability inventory). However, the workflow requires an explicit user approval step for the generated draft before any external actions are performed (Sanitization).\n- [EXTERNAL_DOWNLOADS]: The skill references a project logo fromcdn.tw93.funand official product links tomole.fit. These domains are associated with the author's infrastructure and represent legitimate project resources.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata