prepare-release Informe de auditoría.

Advertencias

• The skill directly executes `pnpm build:builtin-knowledge` and creates git branches/PRs without explicit user confirmation beyond the initial request. This could lead to unintended side effects if the agent is misused or the user input is misinterpreted.
• There is no explicit handling of prompt injection from commit messages or other repository content. While the skill only extracts `release-note` blocks, an attacker could craft commit messages to inject instructions into the release-note generation step (though the LLM is expected to follow the skill's rules).

Método

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.