release
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Git commit history (messages and bodies) via
git logandgit showto generate changelogs. - Ingestion points: External data enters the agent context through the output of Git shell commands in
reference/notes.md. - Boundary markers: The instructions do not specify explicit delimiters or 'ignore' warnings for the data processed from the commit history.
- Capability inventory: The skill is restricted to read-only operations and text generation, explicitly forbidding opening pull requests, tagging, or promoting releases.
- Sanitization: There is no mention of escaping or filtering content from commit messages before they are processed by the LLM.
Audit Metadata