keep-a-changelog-generator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell-based git commands to retrieve project history.
- Evidence: Use of
git log --oneline,git log --format, and tag-based comparisons to extract commit data. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from git history, which could contain instructions intended to override agent behavior.
- Ingestion points: Data enters the agent context through the output of
git logcommands as specified in the Workflow section ofSKILL.md. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat commit messages as untrusted data or to ignore instructions embedded within them.
- Capability inventory: The skill allows for command execution (git) and modification of the local
CHANGELOG.mdfile. - Sanitization: No filtering or sanitization of commit message content is implemented before the agent processes the text into user-facing descriptions.
Audit Metadata