changelog
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute localgitandlscommands. These operations are used solely to retrieve repository metadata (tags and commit history) and check for the existence of changelog files, which is essential for its core functionality. - [SAFE]: All file operations (
Read,Write,Edit) are constrained to standard project documentation files likeChangelog.mdandChangelog-Dev.mdwithin the local workspace. - [SAFE]: The skill processes Git commit messages as data to categorize and summarize changes. While commit messages are technically untrusted input, the skill's workflow and use of templates focus on text generation and documentation rather than executing the content of these messages, presenting a negligible security risk.
Audit Metadata