release-notes
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes external untrusted data from git history to generate reports and releases.
- Ingestion points: Git commit logs and pull request descriptions retrieved via
git log(SKILL.md). - Boundary markers: Absent; the instructions do not specify delimiters or warnings to ignore instructions embedded within commit messages.
- Capability inventory: Shell access for repository operations including
git log,git tag, andgit push(SKILL.md). - Sanitization: No content validation or sanitization is performed on commit messages before the agent processes them.
Audit Metadata