pflow-changelog

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Requires the mdtodo CLI utility to be installed on the host system to query task and feature data from project files.
  • [EXTERNAL_DOWNLOADS]: Dependencies include a shared library script (git-lib.sh) expected to be present in a sibling skill directory (pflow-commit).
  • [COMMAND_EXECUTION]: Executes several git commands, including git log, git commit, and git push, which are necessary for its primary purpose of synchronizing documentation with the remote repository.
  • [PROMPT_INJECTION]: Contains an indirect prompt injection surface as the agent processes data that could be influenced by external contributors.
  • Ingestion points: scripts/changelog-context.sh retrieves raw text from git commit history and project todo lists (Markdown files).
  • Boundary markers: Absent; the skill does not use delimiters to wrap the ingested repository data when presenting it to the agent.
  • Capability inventory: The skill has the ability to write to the file system (CHANGELOG.md) and perform network operations via git push through its scripts.
  • Sanitization: No sanitization or validation is performed on the commit messages or task descriptions before they are analyzed by the AI.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:36 PM
Security Audit — agent-trust-hub — pflow-changelog