pflow-changelog
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Requires the
mdtodoCLI utility to be installed on the host system to query task and feature data from project files. - [EXTERNAL_DOWNLOADS]: Dependencies include a shared library script (
git-lib.sh) expected to be present in a sibling skill directory (pflow-commit). - [COMMAND_EXECUTION]: Executes several git commands, including
git log,git commit, andgit push, which are necessary for its primary purpose of synchronizing documentation with the remote repository. - [PROMPT_INJECTION]: Contains an indirect prompt injection surface as the agent processes data that could be influenced by external contributors.
- Ingestion points:
scripts/changelog-context.shretrieves raw text from git commit history and project todo lists (Markdown files). - Boundary markers: Absent; the skill does not use delimiters to wrap the ingested repository data when presenting it to the agent.
- Capability inventory: The skill has the ability to write to the file system (
CHANGELOG.md) and perform network operations viagit pushthrough its scripts. - Sanitization: No sanitization or validation is performed on the commit messages or task descriptions before they are analyzed by the AI.
Audit Metadata