change-log-generator

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructions use the standard 'git log' command to extract commit history, which is a safe and read-only operation appropriate for generating changelogs.
  • [SAFE]: No network requests, external downloads, or exfiltration patterns were detected.
  • [SAFE]: The skill does not access sensitive system files, environment variables, or hardcoded credentials.
  • [SAFE]: The instructions require the agent to rewrite and transform commit messages into user-facing entries, which serves as a natural sanitization process for any potentially malicious content in the Git history (Indirect Prompt Injection surface).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 09:19 PM
Security Audit — agent-trust-hub — change-log-generator