release-funstack
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Git and GitHub CLI (gh) commands to manage versioning and releases. These tools are explicitly restricted in the YAML frontmatter's
allowed-toolsconfiguration to limit the command surface. - [DATA_EXPOSURE]: The skill reads project-specific configuration files (package.json) and local git history to generate release notes. No sensitive files or credentials (like .env, .ssh, or AWS keys) are accessed.
- [EXTERNAL_DOWNLOADS]: No remote scripts or external packages are downloaded or executed during the skill's operation.
- [PROMPT_INJECTION]: The instructions provide a clear, step-by-step workflow for the agent without any attempts to bypass safety filters or override system instructions.
Audit Metadata