utility-pm-changelog-curator
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill instructions direct the agent to 'Execute the system prompt body in [subagents/pm-changelog-curator.md] as your operating instructions'. This pattern of dynamic instruction loading from external files creates a dependency on the integrity of the referenced file within the repository.
- [PROMPT_INJECTION]: The skill exhibits an Indirect Prompt Injection surface. Untrusted data enters the agent context via
git logoutput (commit messages) as described inSKILL.md. Boundary markers or 'ignore' instructions are absent to delimit this external content. The agent has capabilities to execute shell commands and read/write files. No sanitization or validation of commit message content is mentioned before it is processed by the agent. - [COMMAND_EXECUTION]: The skill requires shell access to execute
gitcommands such asgit log,git describe, andgit statusto retrieve the repository history necessary for its stated purpose.
Audit Metadata