release-notes-generator
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from git commit messages and GitHub pull request metadata (titles and descriptions) fetched via
git logandgh apiinSKILL.md. This creates a surface for indirect prompt injection where malicious instructions in a PR could attempt to hijack the release note generation process. - Ingestion points: External data enters via git history and GitHub API responses.
- Boundary markers: Absent; there are no instructions to the agent to ignore or delimit instructions found within the commit/PR data.
- Capability inventory: The skill can execute shell commands via the
Bashtool and write to the filesystem (CHANGELOG.md). - Sanitization: Absent; the skill does not specify any filtering or escaping of the ingested text.
Audit Metadata