release-notes
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats were identified. The skill consists entirely of instructional documentation for drafting and reviewing release notes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository history (commits and pull requests) which could contain hidden instructions. This is a characteristic of the task itself rather than a malicious implementation. 1. Ingestion points: Commits and merged PRs mentioned in SKILL.md. 2. Boundary markers: The instructions do not prescribe the use of delimiters for the ingested data. 3. Capability inventory: The skill does not define or invoke any shell commands, network operations, or scripts. 4. Sanitization: There are no specific instructions to sanitize or validate the content of the commits.
Audit Metadata