release-notes-generator
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. The skill uses the vendor's command-line tool (dxs) for its intended purpose of release note generation.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted data from external sources.\n
- Ingestion points: Data enters the context via
dxs source compare(commits),dxs source workitems(descriptions), anddxs source diff(code diffs).\n - Boundary markers: The instructions do not specify boundary markers or delimiters for the external content.\n
- Capability inventory: The skill only performs read operations and generates text; no high-risk capabilities (e.g., file writes, arbitrary command execution) are present.\n
- Sanitization: No specific sanitization or filtering logic is defined for the external inputs.
Audit Metadata