changelog-writing

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill acts as a specialized writing assistant for developer relations tasks, focusing on the processing of local repository data without any external network dependencies or sensitive data access.
  • [COMMAND_EXECUTION]: The script scripts/collect-release-material.sh automates the extraction of commit messages, PR subjects, and diff statistics using standard git commands. It implements safe variable handling and performs read-only operations on the repository history.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository (e.g., pull request titles and bodies). It provides a specific 'Verification gate' instruction that mitigates potential prompt injection within this data by requiring the agent to cross-reference all textual claims against the actual technical code diffs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 08:33 PM