update-changelog
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to interact with the local git repository.
- Evidence: Uses
git rev-parse --show-toplevelto locate the repository root. - Evidence: Uses
git diff --cachedandgit diffto analyze changes in the codebase. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could contain malicious instructions designed to influence the agent's behavior during the changelog generation process.
- Ingestion points: Reads data from
git diff(which includes commit messages and code changes) and the conversation context (SKILL.md, Steps 3 and 5). - Boundary markers: None. The skill does not define specific delimiters or instructions to ignore embedded commands in the diff data.
- Capability inventory: The skill has the capability to execute shell commands (
git) and modify files (CHANGELOG.md). - Sanitization: None. The skill does not specify any validation or filtering of the content retrieved from git before it is used to update the changelog.
Audit Metadata