changelog-automation
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands for several well-known and trusted development tools from official registries, including @commitlint/cli, husky, standard-version, and semantic-release from npm, as well as commitizen from PyPI.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill functions as a documentation resource for developers to implement standard release workflows. It correctly demonstrates the use of GitHub Secrets for sensitive tokens (GITHUB_TOKEN, NPM_TOKEN) within CI/CD pipelines.
Audit Metadata