changelog-generator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git commit histories to generate user-facing changelogs.
- Ingestion points: Git commit history accessed via git commands as described in SKILL.md.
- Boundary markers: Absent. The instructions do not provide specific delimiters or warnings to the agent to ignore potential instructions embedded within commit messages.
- Capability inventory: The skill facilitates reading git history and local configuration files (e.g., CHANGELOG_STYLE.md).
- Sanitization: Absent. The skill lacks explicit instructions to sanitize or validate the content of commit messages before transformation.
Audit Metadata