changelog-generator
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing untrusted data from git commit history.
- Ingestion points: Commit messages are retrieved from the local repository using
git logcommands as described inSKILL.md. - Boundary markers: None. The skill does not instruct the agent to use delimiters or ignore potentially malicious instructions embedded within the commit messages.
- Capability inventory: The skill uses
git logfor data retrieval and performs text transformation; no high-risk capabilities such as arbitrary file writing or network access are present in the provided instructions. - Sanitization: No input validation or filtering of commit message content is implemented.
Audit Metadata