workflow
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git logto retrieve commit information for synchronization with the changelog. This is standard behavior for a development workflow tool. - [PROMPT_INJECTION]: The skill processes data from project documentation and commit history, which constitutes a surface for indirect prompt injection.
- Ingestion points: Reads content from
git log,task.md,changelog.md, andfiles.md. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Includes file system read/write and local git command execution.
- Sanitization: No specific content filtering or sanitization is mentioned.
Audit Metadata