The Agent Skills Directory

[SAFE]: The skill provides instructions for a standard developer documentation workflow involving the generation of release notes from Git history. No malicious patterns or security risks were detected.
[COMMAND_EXECUTION]: The skill utilizes local Git commands including git log and git show. These are used appropriately to inspect commit metadata and code diffs within the repository. There is no evidence of shell injection or execution of untrusted remote content.
[DATA_EXPOSURE]: The skill's data access is limited to the repository's commit history and existing release notes file. It does not attempt to access sensitive system files, credentials, or environment variables. No network capabilities are requested or used for data exfiltration.
[PROMPT_INJECTION]: While the skill processes untrusted data in the form of commit messages and code diffs, it does not possess capabilities that would allow for successful exploitation via indirect prompt injection. The scope is limited to technical documentation generation.

release-notes