release-writing

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a sequence of shell commands using git and gh (GitHub CLI) to automate the release lifecycle, including tag creation, pull request management, and release publication.
  • [COMMAND_EXECUTION]: Instructs the agent to execute a Python script (source_release.py) located in the organization's .github repository to validate version and tag consistency before merging.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill reads existing release descriptions from the GitHub API via gh release view and stores them in temporary files for processing (SKILL.md, Section 4).
  • Boundary markers: No specific delimiters or "ignore" instructions are used when processing the retrieved release note content.
  • Capability inventory: The skill possesses the capability to modify repository content via gh release edit, create new commits/tags, and open pull requests.
  • Sanitization: The skill employs sed with a regex escaping step to sanitize search patterns when performing organizational name changes within release notes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 04:53 AM