changelog-maintenance
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection as its primary function is to ingest and format untrusted descriptions of software changes into structured documentation.
- Ingestion points: Software change descriptions and version details provided by the user or external systems as described in the instructions of SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or guardrails to prevent the agent from executing instructions that might be embedded within the change descriptions provided for documentation.
- Capability inventory: The skill primarily focuses on text generation and formatting. The YAML frontmatter does not request access to dangerous tools such as network access, arbitrary shell execution, or sensitive file system operations.
- Sanitization: There are no instructions for the agent to validate, filter, or escape the content of the changes before including them in the generated CHANGELOG.md or release notes.
Audit Metadata