app-store-changelog
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs legitimate local operations to extract git history for documentation purposes. No evidence of data exfiltration, malicious behavior, or obfuscation was found.
- [COMMAND_EXECUTION]: The script
scripts/collect_release_changes.shuses unquoted shell variables (${range}) when executinggit log. This is a best-practice violation that could allow for command injection if a repository contained git tags with malicious shell metacharacters. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted commit messages and tag names.
- Ingestion points: Git history data (commit messages and refs) ingested by
scripts/collect_release_changes.sh. - Boundary markers: None.
- Capability inventory: Shell command execution (via
git) and project file reading. - Sanitization: None.
Audit Metadata