changelog-writing
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as a specialized writing assistant for developer relations tasks, focusing on the processing of local repository data without any external network dependencies or sensitive data access.
- [COMMAND_EXECUTION]: The script
scripts/collect-release-material.shautomates the extraction of commit messages, PR subjects, and diff statistics using standardgitcommands. It implements safe variable handling and performs read-only operations on the repository history. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository (e.g., pull request titles and bodies). It provides a specific 'Verification gate' instruction that mitigates potential prompt injection within this data by requiring the agent to cross-reference all textual claims against the actual technical code diffs.
Audit Metadata