change-publish
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local setup scripts to resolve project paths and detect files ready for publishing.
- Evidence: Calls to
scripts/bash/setup-change-publish.shandscripts/powershell/setup-change-publish.ps1are used to populate environment variables like REPO_ROOT and ACCEPTED_CHDRS. - [INDIRECT_PROMPT_INJECTION]: The skill reads content from project-local markdown drafts and interpolates that content into durable memory files and a boot-facing index.
- Ingestion points: Reads
ChDR-*.mdfiles from the.adlc/drafts/chdr/directory as seen in Phase 0 and Phase 4. - Boundary markers: Absent. The skill extracts specific sections (Context, Decision, Consequences, Evidence) verbatim from the source drafts without explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill has the capability to write and modify markdown files within the project's
.adlc/directory. - Sanitization: Implements a 'provenance validation' step (Phase 2) which checks that decision claims contain a valid commit SHA or URL, providing a rudimentary integrity check against unverified content.
Audit Metadata