update-changelog
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to automate the maintenance of a
CHANGELOG.mdfile using the 'Keep a Changelog' standard. Its operations are transparent and consistent with its described purpose. - [COMMAND_EXECUTION]: The skill utilizes
gitcommands (e.g.,git tag,git log,git remote) to collect versioning data and commit history. These operations are performed via a restricted bash tool as defined in the skill's configuration. - [DATA_EXPOSURE]: The skill reads commit messages and the existing
CHANGELOG.mdfile to synthesize updates. It does not access sensitive directories or credentials, and it uses the repository's remote URL only to generate documentation links for platforms like GitHub, GitLab, or Bitbucket. - [PROMPT_INJECTION]: Instructions provided to the agent focus on content formatting and summarization techniques (e.g., 'Do NOT copy commit messages verbatim', 'Changelogs are for humans'). These are benign instructional constraints aimed at improving output quality rather than bypassing safety protocols.
Audit Metadata