apply-semantic-versioning
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The bundled Python script
scripts/semver.pyutilizessubprocess.runto executegit tag --list. This is a hardcoded, non-shell command used solely for discovering existing version tags within the local repository environment. - [COMMAND_EXECUTION]: The verification script
assets/examples/verify.shand the test suitescripts/test_semver.pyexecute localgitandpython3commands to perform functionality checks and unit tests in a controlled, temporary directory environment. - [SAFE]: The skill operates entirely locally using the Python standard library. It does not initiate network connections to untrusted domains, download external scripts at runtime, or access sensitive user files or credentials.
- [SAFE]: All external documentation links provided in the reference cards target official specification sites and well-known developer resources, including semver.org, GitHub (npm), and official documentation for Rust, Python, and Go.
Audit Metadata