release-change-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: Potential for indirect prompt injection via repository diff data.
- Ingestion points: The skill processes the output of
git diffas described inSKILL.md. - Boundary markers: The skill does not implement delimiters or safety instructions to isolate the diff content from its internal logic.
- Capability inventory: The skill is capable of executing shell commands including
git,npm, andpip. - Sanitization: There is no sanitization or validation of the content produced by the
git diffcommand before analysis. - [EXTERNAL_DOWNLOADS]: Queries metadata from official registries.
- The skill performs version checks using
npm viewandpip index, which involve read-only network requests to official NPM and PyPI registries. - [COMMAND_EXECUTION]: Uses standard development CLI tools.
- The skill executes
git,npm, andpipto facilitate its core functionality of change analysis and versioning recommendations.
Audit Metadata