ai-changelog
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/version.pyscript executes thegit rev-list --count HEADcommand using the Pythonsubprocessmodule. This is used exclusively to calculate version numbers based on the commit history for projects using the CalVer scheme. The command is static and does not incorporate unsanitized user input.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data which could potentially contain instructions for agents, creating an indirect prompt injection surface.\n - Ingestion points: The
scripts/version.pyscript and the agent instructions read content fromCHANGELOG.mdand project manifest files includingpackage.json,Cargo.toml,pyproject.toml,tauri.conf.json, andVERSION.\n - Boundary markers: The skill utilizes an HTML comment block (
<!-- AI agents: ... -->) in theCHANGELOG.mdtemplate to define the scope and rules for agent interactions with the file.\n - Capability inventory: The skill includes a Python script capable of reading and writing local files and executing hardcoded
gitcommands viasubprocess.run.\n - Sanitization: The script uses standard library JSON parsing and strictly scoped regular expressions for version stamping, minimizing the risk of arbitrary code or prompt execution from potentially poisoned project configuration files.
Audit Metadata