prepare-release 監査レポート.

警告

• The skill directly executes `pnpm build:builtin-knowledge` and creates git branches/PRs without explicit user confirmation beyond the initial request. This could lead to unintended side effects if the agent is misused or the user input is misinterpreted.
• There is no explicit handling of prompt injection from commit messages or other repository content. While the skill only extracts `release-note` blocks, an attacker could craft commit messages to inject instructions into the release-note generation step (though the LLM is expected to follow the skill's rules).

方法

このレポートは公開メタデータ、AI レビュー、リポジトリの鮮度、インストール準備、OpenAgentSkill イベント、品質スコア、信頼チェック、Agent セーフティゲートを統合します。完全なソースコード監査ではありません。