release-notes
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git commit messages and GitHub PR details, which is a standard requirement for its primary function.
- Ingestion points: Commit history retrieved via
git logand pull request metadata fetched viagh api(documented in SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions that might be embedded in commit messages or PR descriptions.
- Capability inventory: The skill is designed to use the
gitandghcommand-line interfaces for repository management and metadata retrieval. - Sanitization: No explicit sanitization, validation, or escaping of the ingested commit or PR data is mentioned in the workflow.
Audit Metadata