release-notes
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from git history (commit messages and pull request titles) to generate release notes. This creates a surface for indirect prompt injection attacks where an attacker with commit access could influence the agent behavior.
- Ingestion points: Commits and merged PRs are fetched as described in SKILL.md and README.md.
- Boundary markers: No delimiters or safety instructions are used to separate external user data from agent instructions.
- Capability inventory: The skill uses git tools to read repository data and generates formatted markdown output.
- Sanitization: No sanitization or validation is performed on the commit messages or pull request titles before processing.
Audit Metadata