changelog
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes git commit messages and pull request descriptions. Because this content is often provided by various contributors, it serves as an untrusted ingestion point where an attacker could attempt to influence the agent's behavior via embedded instructions.
- Ingestion points: Git commit history and PR descriptions (referenced in step 2 and 6).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill body.
- Capability inventory: The skill is limited to reading files and generating Markdown output; it does not request network access or shell execution permissions.
- Sanitization: No sanitization or filtering of commit message content is described.
Audit Metadata