docs-review-changelog
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches canonical guidance and product configuration from Elastic's official GitHub repositories and documentation website.
- Resources fetched include
ChangelogEntry.csandproducts.ymlfrom theelastic/docs-builderrepository. - Standards are also retrieved from the official
elastic.codocumentation site. - [INDIRECT_PROMPT_INJECTION]: The skill reads and processes untrusted changelog YAML files from the workspace, creating a potential surface for embedded instructions to influence the agent's behavior.
- Ingestion points: The skill glob-searches for and reads
*.yamland*.ymlfiles from a user-provided path or directory (Step 2). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when passing changelog content to the agent for review.
- Capability inventory: The skill has access to the
WebFetchtool for external data retrieval and theReadtool for accessing local files. - Sanitization: There is no evidence of sanitization or filtering applied to the text fields within the changelog files before they are analyzed by the AI.
Audit Metadata