release-notes-generator
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from git commit messages and GitHub pull request descriptions. This represents an attack surface where adversarial content in a commit could attempt to influence the agent's generation logic.\n
- Ingestion points: Git log output and GitHub API pull request responses (as seen in SKILL.md).\n
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' directives to isolate external content from the agent's core instructions.\n
- Capability inventory: The skill uses the Bash tool for repository interaction and has the capability to write to local files such as CHANGELOG.md.\n
- Sanitization: There is no mention of sanitizing or escaping the content of commits or PRs before it is handled by the agent.\n- [COMMAND_EXECUTION]: The skill performs shell command execution via the Bash tool to run git commands (git tag, git log, git show) and GitHub CLI operations (gh api) for repository data retrieval.
Audit Metadata