changelog-automation
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and installs several widely-used development tools and libraries from official registries (npm and PyPI). These include @commitlint/cli, husky, standard-version, and semantic-release. It also utilizes well-known GitHub Actions (actions/checkout, actions/setup-node, softprops/action-gh-release) for release workflows.- [COMMAND_EXECUTION]: Provides instructions for executing standard CLI tools used in the development lifecycle, such as npm, npx, git, and cz (commitizen). These commands are used for local configuration, version bumping, and publishing releases.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted data in the form of commit messages and pull request titles to generate human-readable changelogs. 1. Ingestion points: Git commit history and PR metadata (SKILL.md). 2. Boundary markers: Explicit instructions to manually review the generated output for accuracy and wording (SKILL.md). 3. Capability inventory: File system writes for CHANGELOG.md and Git operations for version tagging and pushing changes (implementation-playbook.md). 4. Sanitization: No explicit sanitization logic is provided in the templates, relying instead on tool defaults and human review.
Audit Metadata