create-changelog
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill reads GitHub release bodies using
gh release viewand git commit summaries usinggit loginSKILL.md. - Boundary markers: There are no explicit instructions to the agent to ignore or delimit potentially malicious instructions within the fetched release notes or commit logs.
- Capability inventory: The skill has the ability to execute shell commands (
git,gh) and write files to the local file system as described inSKILL.md. - Sanitization: No sanitization or validation of the fetched release notes or commit messages is performed before they are processed by the agent.
Audit Metadata