docs-changelog
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation and formatting instructions for writing changelogs. No malicious code, obfuscation, or data exfiltration patterns were detected.
- [PROMPT_INJECTION]: The skill describes a workflow that ingests external data from pull requests and issues to generate documentation. While this creates a surface for indirect prompt injection, it is associated with the skill's primary purpose. Evidence Chain: (1) Ingestion points: facts collected from PRs, commits, and issues in SKILL.md; (2) Boundary markers: absent; (3) Capability inventory: writing .mdx files to the docs/changelog directory; (4) Sanitization: manual review mentioned in the authoring workflow.
Audit Metadata