changelog
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-controlled
CHANGELOG.mdfiles which serves as a potential ingestion point for indirect instructions aimed at the agent. - Ingestion points: The skill reads
CHANGELOG.mdusing various tools likecat,grep,awk, andsedinSKILL.mdandreferences/advanced-usage.md. - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the processed file content.
- Capability inventory: The skill has the capability to execute
git commitandgit tagcommands, modify files viased -i, and run local installation scripts. - Sanitization: No specific sanitization or validation of the changelog content is performed before the agent processes it for versioning workflows.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and scripts to download the
git-clifftool from its official GitHub repository and mentions optional validation tools available via npm. - [COMMAND_EXECUTION]: The
scripts/install.shandscripts/install.ps1helper scripts utilize system package managers (such asapt-get,brew, andwinget) and require administrative privileges (sudo) for certain installation paths. - [COMMAND_EXECUTION]: Release automation scripts in
references/advanced-usage.mduse shell commands and regular expressions to automate version updates, git commits, and tagging, which are standard project maintenance operations.
Audit Metadata