changelog-generator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or dangerous command executions were detected in the skill instructions.
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any executable scripts or configuration files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data (git commit messages) which could potentially contain malicious instructions. This is an inherent risk of the task.
- Ingestion points: Git commit history (SKILL.md).
- Boundary markers: None specified.
- Capability inventory: No executable capabilities or network operations are defined in this skill.
- Sanitization: No explicit content filtering or sanitization rules are provided.
Audit Metadata