changelog
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes git commit history, which serves as an untrusted ingestion surface. Maliciously crafted commit messages could attempt to influence the AI assistant's output during changelog generation.
- Ingestion points: Git commit history retrieved via
git log(SKILL.md) - Boundary markers: No explicit delimiters or instructions to ignore commands within commits are present.
- Capability inventory: The skill has
Writepermissions to the local filesystem to updateCHANGELOG.md. - Sanitization: No explicit sanitization of commit message content is described.
- [COMMAND_EXECUTION]: The skill is configured to use the
Bashtool, specifically scoped togit log:*commands. While this involves command execution, the scope is appropriately restricted to its stated purpose of version history analysis.
Audit Metadata