add-release-notes

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution: The skill utilizes pnpm to run local repository scripts, specifically generate-changelog-markdown-files and generate-component-changelog-entries. These are standard automation tools used within the project to maintain documentation consistency.
  • Data Ingestion and Processing: The skill reads content from CHANGELOG.md and package.json to extract version information and update website documentation. This is a routine task for release management and is constrained to the local file system.
  • Controlled Environment: The instructions include explicit safeguards, such as restricting the skill's execution to the changeset-release/main branch and prohibiting the agent from pushing changes to the remote repository without user intervention.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 02:21 PM
Security Audit — agent-trust-hub — add-release-notes