changelog-generator
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data from git commit histories and style guides, creating a surface for indirect prompt injection.
- Ingestion points: Git commit history and repository files (e.g., CHANGELOG_STYLE.md) are read from the project environment.
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore instructions embedded within the commit data.
- Capability inventory: The skill relies on filesystem and git repository read access.
- Sanitization: No sanitization or filtering of the processed commit content is specified.
Audit Metadata