sync-changelog
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard command-line tools such as
git,npm,gh,rg, andpnpmto perform repository management tasks, including branch creation, version verification, documentation builds, and pull request creation. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from
apps/kimi-code/CHANGELOG.md, which creates a surface for indirect prompt injection if malicious instructions were merged into the upstream source. The risk is minimized by the skill's specific rules for data transformation. - Ingestion points:
apps/kimi-code/CHANGELOG.mdis read to extract version blocks and entry body text. - Boundary markers: The instructions provide rigid logic for parsing, stripping decorations, and classifying entries, which helps maintain a clear separation between content and instructions.
- Capability inventory: The agent possesses capabilities for file system writes to documentation paths, shell command execution for repository operations, and automated pull request generation.
- Sanitization: Mandatory instructions to remove PR links, commit hashes, and 'Thanks' credits, along with requirements to replace internal identifiers with neutral placeholders, serve as effective sanitization layers.
Audit Metadata