shared-tooling-changesets
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official tooling from the Changesets ecosystem, including the
@changesets/cliand@changesets/changelog-githubNPM packages, and thechangesets/actionGitHub Action. These are standard dependencies for the versioning workflow described and originate from a recognized open-source organization. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted repository content (changeset markdown files) to generate release artifacts.
- Ingestion points: The
@changesets/clitool reads user-provided markdown files within the.changeset/directory. - Boundary markers: Content is delimited using YAML frontmatter markers (
---). - Capability inventory: The tool possesses the capability to modify local files (
package.json,CHANGELOG.md) and perform authenticated network operations to registries (npm publish). - Sanitization: Content processing is delegated to the established
@changesets/clitool logic, and the behavior is the primary intended purpose of the skill.
Audit Metadata