simple-changelogs-mobile
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository commit history and Markdown files to generate changelogs, which represents an indirect prompt injection surface. This is a characteristic of the skill's intended purpose for history reconstruction.
- Ingestion points: Commit messages retrieved via Git log and existing Markdown changelog files within the repository.
- Boundary markers: The skill utilizes Markdown structural elements (headings, bullet points) as defined in its parser to delimit and categorize entries.
- Capability inventory: The bundled TypeScript and shell scripts perform file system operations (reading, writing, and renaming policy/changelog files) and execute local Git commands via subprocess calls to analyze repository history.
- Sanitization: Content is processed using a deterministic Markdown parser that specifically identifies and strips signature comments and other metadata before rendering entries to release-note surfaces.
Audit Metadata