release-change-analyzer

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: Potential for indirect prompt injection via repository diff data.
  • Ingestion points: The skill processes the output of git diff as described in SKILL.md.
  • Boundary markers: The skill does not implement delimiters or safety instructions to isolate the diff content from its internal logic.
  • Capability inventory: The skill is capable of executing shell commands including git, npm, and pip.
  • Sanitization: There is no sanitization or validation of the content produced by the git diff command before analysis.
  • [EXTERNAL_DOWNLOADS]: Queries metadata from official registries.
  • The skill performs version checks using npm view and pip index, which involve read-only network requests to official NPM and PyPI registries.
  • [COMMAND_EXECUTION]: Uses standard development CLI tools.
  • The skill executes git, npm, and pip to facilitate its core functionality of change analysis and versioning recommendations.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 10:21 PM