gen-changelog

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes command-line tools such as git log and git diff to analyze code changes. It also executes a local repository script node docs/scripts/sync-changelog.mjs. These commands are specific to the skill's intended purpose of document synchronization and do not involve untrusted network input or arbitrary code execution.
  • [INDIRECT_PROMPT_INJECTION]: The agent processes output from git history and code diffs. While these represent external data sources, the risk of instruction injection via commit messages or code changes is minimal in this context and standard for development-oriented agents.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 11:45 PM
Security Audit — agent-trust-hub — gen-changelog