docs-updater

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute git commands and update documentation files. These operations are standard and limited to the local repository context.\n- [PROMPT_INJECTION]: The skill processes untrusted commit messages, creating an indirect prompt injection surface.\n
  • Ingestion points: Commit messages are fetched via git log and used for changelog generation.\n
  • Boundary markers: No explicit markers are used to delimit the commit messages from instructions.\n
  • Capability inventory: The skill utilizes Bash, Write, and Edit tools to perform its tasks.\n
  • Sanitization: No content validation or sanitization of commit messages is implemented.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 07:09 AM