breaking-changes
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from Claude Code API documentation and official changelogs.
- Ingestion points: Step 2 of the detection workflow in
SKILL.md("Fetch latest Claude Code API docs"). - Boundary markers: No specific delimiters or instructions to ignore embedded commands in the documentation are present.
- Capability inventory: The skill utilizes
grep,diff, and local scripts to report on plugin impact. - Sanitization: The instructions do not specify sanitization or validation of the fetched changelog content.
- [EXTERNAL_DOWNLOADS]: The skill workflow involves retrieving remote documentation to perform its primary function.
- Evidence: The
SKILL.mdworkflow and thereferences/api-surface.mdmention offetch-changelog.shutilizingcurl -sLfor fetching changelogs. - Context: This activity is intended for accessing official product documentation and updates.
Audit Metadata