skills/tw93/mole/release-notes/Gen Agent Trust Hub

release-notes

Fail

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: CRITICALCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local repository scripts and build tools, including ./scripts/test.sh, make build, and go test, to verify the release state. It also runs a local helper script scripts/post-reactions.sh to automate GitHub API calls.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from git log and commit message bodies (Ingestion points). It lacks explicit boundary markers to delimit this external content (Boundary markers). The skill possesses capabilities for shell execution and GitHub repository modifications (Capability inventory). However, the workflow requires an explicit user approval step for the generated draft before any external actions are performed (Sanitization).\n- [EXTERNAL_DOWNLOADS]: The skill references a project logo from cdn.tw93.fun and official product links to mole.fit. These domains are associated with the author's infrastructure and represent legitimate project resources.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 14, 2026, 11:56 AM