The Agent Skills Directory

[SAFE]: The skill is a well-structured engineering tool designed for API contract management. It provides clear instructions for setting up CI/CD pipelines and managing breaking changes.
[EXTERNAL_DOWNLOADS]: The documentation references oasdiff, a widely recognized open-source tool for OpenAPI diffing. These references are provided as configuration guidance for the user's environment and do not involve the agent executing unverified remote code.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection, as it ingests untrusted data from API diffs and change fragments. However, the skill explicitly mandates a "trace check" verification process via a provided script to ensure output matches source data and requires human review for all generated summaries, effectively mitigating the risk.
[DYNAMIC_EXECUTION]: The provided Python scripts (build-entries.py and check-entry-trace.py) use only Python standard libraries and perform deterministic data processing. No unsafe execution patterns such as eval(), exec(), or untrusted deserialization were found.

api-changelog-automation