changelog-generator
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or dangerous command executions were detected. The skill is purely instructional and does not include any scripts or executable files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, untrusted data in the form of Git commit messages, which represents a potential surface for indirect prompt injection.
- Ingestion points: The skill reads git commit history and an optional
CHANGELOG_STYLE.mdfile as specified inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the commits.
- Capability inventory: The skill is limited to text analysis and generation; it does not include logic for network operations, privilege escalation, or persistence.
- Sanitization: The skill relies on the underlying LLM's native safety filters to handle potentially malicious content within commit messages.
Audit Metadata