draft-release-notes
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses standard Git CLI tools to retrieve tags, commit logs, and diff statistics to inform the release notes draft.
- [EXTERNAL_DOWNLOADS]: Fetches release note metadata from GitHub's official API using the gh command-line tool.
- [INDIRECT_PROMPT_INJECTION]: Ingestion points: Reads commit messages and GitHub PR data from the repository history (SKILL.md). Boundary markers: Uses specific Markdown headers (## [Unreleased]) to delimit content. Capability inventory: Capability is limited to local shell execution of git/gh and local file writes to CHANGELOG.md. Sanitization: No explicit sanitization of commit messages or PR titles is performed before interpolation into the changelog.
Audit Metadata