sync-changelog
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands including
git,gh,npm, andpnpmto manage versioning and documentation builds. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its handling of data from the
apps/kimi-code/CHANGELOG.mdfile. - Ingestion points:
apps/kimi-code/CHANGELOG.mdwhere changelog entries, commit hashes, and PR numbers are read. - Boundary markers: None present to distinguish data from command parameters.
- Capability inventory: Shell access using
git showandgh pr viewwith extracted identifiers. - Sanitization: No validation is performed on commit hashes or PR numbers before execution.
Audit Metadata