conventional-changelog
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves exclusively as a technical reference and documentation guide for developers. It does not contain any executable scripts, automated background tasks, or hidden instructions.
- [EXTERNAL_DOWNLOADS]: The skill references standard package managers (npm, cargo, brew) and official GitHub Actions (googleapis/release-please-action). These are well-known, legitimate developer tools and services mentioned for educational purposes.
- [COMMAND_EXECUTION]: Provides example shell commands for tool installation and usage. These commands are clearly documented as manual setup steps for the user and are not executed automatically by the skill.
- [METADATA_POISONING]: Metadata fields (name, description) accurately reflect the content of the skill and do not contain any deceptive instructions.
Audit Metadata