docs-kibana-release-notes
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation templates and pull request data from official repositories within the 'elastic' GitHub organization and a dedicated release notes generator domain. These resources are authoritative for the skill's purpose.
- [PROMPT_INJECTION]: The skill ingests data from external GitHub PRs (titles, descriptions, comments, and diffs) which could contain adversarial instructions. The impact is minimized by the skill's restricted execution environment and specific documentation task.
- Ingestion points: Raw markdown input and GitHub PR metadata/content retrieved via the 'gh' CLI.
- Boundary markers: None explicitly defined to encapsulate or isolate the untrusted input data.
- Capability inventory: 'Read', 'Grep', and 'Bash' (restricted to the 'gh' tool via allowed-tools).
- Sanitization: No explicit validation or filtering of fetched PR content is performed.
Audit Metadata