changelog-generator

Fail

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • Pro m p t I n j e c t i o n (H I G H ) : Th e s k i l l e x p o s e s a l a r g e i n d i r e c t p r o m p t i n j e c t i o n s u r f a c e . \n
  • In g e s t i o n p o i n t s : T h e a g e n t r e a d s u n t r u s t e d g i t c o m m i t m e s s a g e s h i s t o r y a n d e x t e r n a l f i l e s l i k e ' C H A N G E L O G _ S T Y L E . m d ' . \n
  • Bo u n d a r y m a r k e r s : N o b o u n d a r y m a r k e r s o r i n s t r u c t i o n s t o d i s r e g a r d e m b e d d e d c o m m a n d s a r e p r e s e n t i n t h e s k i l l d e f i n i t i o n . \n
  • Ca p a b i l i t y i n v e n t o r y : T h e s k i l l i m p l i c i t l y r e q u i r e s e x e c u t i n g s y s t e m c o m m a n d s (g i t ) a n d f i l e s y s t e m a c c e s s (r e a d i n g c o m m i t s , w r i t i n g t o C H A N G E L O G . m d ) . \n
  • Sa n i t i z a t i o n : T h e r e i s n o m e n t i o n o f v a l i d a t i n g o r s a n i t i z i n g t h e t e x t t r a n s f o r m e d f r o m ' t e c h n i c a l ' t o ' u s e r
  • f r i e n d l y ' , a l l o w i n g a d v e r s a r i a l i n s t r u c t i o n s t o p e r s i s t i n t h e o u t p u t . \n- C o m m a n d E x e c u t i o n (L O W ) : T h e s k i l l r e l i e s o n t h e e x e c u t i o n o f s h e l l c o m m a n d s ( e . g . , g i t l o g ) t o f u n c t i o n , w h i c h p r e s e n t s a b a s e l i n e r i s k i f s u b p r o c e s s c a l l s i n c o r p o r a t e u n s a n i t i z e d u s e r
  • p r o v i d e d d a t e r a n g e s o r b r a n c h n a m e s .
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 16, 2026, 06:22 AM