changelog-generator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of git commit history and style configuration files.
- Ingestion points: The skill analyzes git commit messages and reads from
CHANGELOG_STYLE.md(as described in SKILL.md). - Boundary markers: No explicit delimiters or boundary markers are defined to help the agent distinguish between data and instructions.
- Capability inventory: The skill requires the ability to read git repository history and write output to the file system (e.g.,
CHANGELOG.md). - Sanitization: There are no instructions for the agent to sanitize or filter potentially malicious content within the git history that could attempt to override agent instructions.
Audit Metadata