tagpr
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes several third-party GitHub Actions, including
Songmu/tagpr,jdx/mise-action, andgoreleaser/goreleaser-action. The instructions explicitly direct users to pin these actions to specific commit SHAs using thepinacttool to mitigate supply chain risks. - [COMMAND_EXECUTION]: The instructions include commands for the GitHub CLI (
gh) to configure repository-level workflow permissions, such as allowing Actions to create and approve pull requests. These administrative commands are necessary for the skill's stated purpose of release automation. - [INDIRECT_PROMPT_INJECTION]: The
tagprautomation processes external input from pull requests, such as labels and descriptions, to determine version bumps and generate changelogs. The skill implements a boundary by requiring specific labels (tagpr:minor,tagpr:major) to influence its behavior, and the tool's capabilities are scoped strictly to repository release management.
Audit Metadata