ai-changelog

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/version.py script executes the git rev-list --count HEAD command using the Python subprocess module. This is used exclusively to calculate version numbers based on the commit history for projects using the CalVer scheme. The command is static and does not incorporate unsanitized user input.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data which could potentially contain instructions for agents, creating an indirect prompt injection surface.\n
  • Ingestion points: The scripts/version.py script and the agent instructions read content from CHANGELOG.md and project manifest files including package.json, Cargo.toml, pyproject.toml, tauri.conf.json, and VERSION.\n
  • Boundary markers: The skill utilizes an HTML comment block (<!-- AI agents: ... -->) in the CHANGELOG.md template to define the scope and rules for agent interactions with the file.\n
  • Capability inventory: The skill includes a Python script capable of reading and writing local files and executing hardcoded git commands via subprocess.run.\n
  • Sanitization: The script uses standard library JSON parsing and strictly scoped regular expressions for version stamping, minimizing the risk of arbitrary code or prompt execution from potentially poisoned project configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 04:24 AM