update-changelog-md
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
git logto retrieve commit history anddateto generate release timestamps. These are standard system utilities required for the skill's primary purpose of maintaining a changelog based on repository history. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via git commit messages.
- Ingestion points: Reads commit messages from
git logand existing content fromCHANGELOG.md. - Boundary markers: No delimiters or safety instructions are used to separate the ingested data from the agent's internal instructions.
- Capability inventory: The skill has the ability to write to the file system (
CHANGELOG.md) and execute shell commands (git,date). - Sanitization: There is no evidence of sanitization or filtering of the commit message content before processing.
- [SAFE]: No evidence of hardcoded credentials, unauthorized network activity, obfuscation, or persistence mechanisms was found. The skill's behavior is consistent with its stated purpose.
Audit Metadata