dotnet-github-releases
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates external data from
CHANGELOG.mdandgit-cliffoutput into release notes, which are then processed by theghtool. This creates a surface where malicious content in a changelog could attempt to influence agent behavior. - Ingestion points: Release notes extracted from
CHANGELOG.mdusingsedand output from thegit-clifftool. - Boundary markers: Absent; the skill does not use specific delimiters or instructions to ignore embedded commands within the release notes body.
- Capability inventory: The skill uses the
ghCLI and GitHub REST API (curl) for network operations and release creation. - Sanitization: Absent; no validation or escaping of the ingested text is performed before interpolation into the release body.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
softprops/action-gh-release@v2GitHub Action andactions/checkout@v4for automating the release process in CI/CD environments. These are well-known community and official actions used for their intended purposes.
Audit Metadata