simple-changelogs-cms
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strictly local file system and Git operations. Subprocess execution is performed securely using
execFileandspawnSyncwith array-based arguments, preventing command injection. - [SAFE]: Security-sensitive operations, such as managing authenticated routes and operator history, are governed by clear documentation and mandatory validation steps.
- [SAFE]: Configuration management follows standard OS-specific patterns for user preferences, using restricted file permissions where appropriate (e.g., 0o600 for global preferences).
- [SAFE]: The skill includes comprehensive JSON schemas and a dedicated validation script to ensure the integrity and structure of all generated changelog data.
- [SAFE]: All external resource references, such as schema URLs and vendor identifiers, are consistent with the provided author context and well-known standards.
Audit Metadata