changelog-generator
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted content such as git commit messages and pull request descriptions which could contain instructions aimed at manipulating the output.
- Ingestion points: Raw git commits, PR bodies, and OpenAPI diffs are parsed as input (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded within the processed git data.
- Capability inventory: The skill has the capability to write files to the
docs/api-report/directory (SKILL.md). - Sanitization: There is no mention of sanitizing or escaping the content from the commit history before writing it to the changelog files.
Audit Metadata