changelog
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands including
git log,git diff,sort, andwcto inspect repository history and calculate metrics. These commands are legitimate tools for the skill's primary purpose of analyzing changes and generating documentation. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository, such as commit messages, diff content, tests, and documentation, to generate changelogs.
- Ingestion points: Reads git logs, diffs, and project documentation (SKILL.md).
- Boundary markers: None explicitly defined to separate untrusted repository content from instructions.
- Capability inventory: Local file inspection and shell command execution (
git,sort,wc). - Sanitization: No specific sanitization or filtering of commit content is mentioned before processing.
- Assessment: While the ingestion surface exists, the risk is minimal as the skill does not have access to high-privilege capabilities like network exfiltration or credential management.
Audit Metadata