changelog

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes user-controlled CHANGELOG.md files which serves as a potential ingestion point for indirect instructions aimed at the agent.
  • Ingestion points: The skill reads CHANGELOG.md using various tools like cat, grep, awk, and sed in SKILL.md and references/advanced-usage.md.
  • Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed file content.
  • Capability inventory: The skill has the capability to execute git commit and git tag commands, modify files via sed -i, and run local installation scripts.
  • Sanitization: No specific sanitization or validation of the changelog content is performed before the agent processes it for versioning workflows.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions and scripts to download the git-cliff tool from its official GitHub repository and mentions optional validation tools available via npm.
  • [COMMAND_EXECUTION]: The scripts/install.sh and scripts/install.ps1 helper scripts utilize system package managers (such as apt-get, brew, and winget) and require administrative privileges (sudo) for certain installation paths.
  • [COMMAND_EXECUTION]: Release automation scripts in references/advanced-usage.md use shell commands and regular expressions to automate version updates, git commits, and tagging, which are standard project maintenance operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:18 PM
Security Audit — agent-trust-hub — changelog