Change Management
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to autonomously identify the project root and create an
analysis/directory to store generated HTML reports. This is a functional requirement for its reporting feature. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of Change Request (CR) text, feature briefs, or ticket descriptions. This content is then processed and formatted into an HTML report. While the instructions emphasize a self-contained report using ASCII only and no external dependencies, there is a potential surface for indirect injection if malicious scripts or tags in the input are reflected in the final HTML output.
- Ingestion points: Change request text, ticket descriptions, or feature briefs provided as input to the skill.
- Boundary markers: None explicitly defined for isolating the input data within the analysis context.
- Capability inventory: File-write operations to the
analysis/directory for HTML report generation. - Sanitization: The skill instructions specify the use of ASCII only and the avoidance of external CSS/JS/font dependencies in the HTML template, which provides some mitigation against common web-based attacks.
Audit Metadata