automate-commit-based-gh-release-changelog
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references
actions/checkout@v6, a standard GitHub Action provided by a well-known service (GitHub), andnpx changelogithub, which fetches a popular utility from the official NPM registry. - [COMMAND_EXECUTION]: Provides shell commands and GitHub Actions configuration for release automation, including the standard use of
${{secrets.GITHUB_TOKEN}}for authentication within the CI/CD environment. - [DATA_EXPOSURE]: Uses standard environment variables for GitHub Actions. No hardcoded secrets or sensitive file access patterns were found.
Audit Metadata