changelog-generator
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegit logcommands to retrieve commit history from the local repository. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from commit messages that could contain malicious instructions.
- Ingestion points: Git commit history retrieved via
git logcommands (SKILL.md). - Boundary markers: Absent. The instructions do not specify using delimiters or provide warnings to ignore embedded instructions within processed commit messages.
- Capability inventory: Shell command execution via
Bashtool and file system modification viaWritetool. - Sanitization: Absent. The skill parses and formats commit messages directly without validation or escaping logic.
Audit Metadata