gen-changelog
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command-line tools such as
git logandgit diffto analyze code changes. It also executes a local repository scriptnode docs/scripts/sync-changelog.mjs. These commands are specific to the skill's intended purpose of document synchronization and do not involve untrusted network input or arbitrary code execution. - [INDIRECT_PROMPT_INJECTION]: The agent processes output from git history and code diffs. While these represent external data sources, the risk of instruction injection via commit messages or code changes is minimal in this context and standard for development-oriented agents.
Audit Metadata