docs-updater
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to executegitcommands and update documentation files. These operations are standard and limited to the local repository context.\n- [PROMPT_INJECTION]: The skill processes untrusted commit messages, creating an indirect prompt injection surface.\n - Ingestion points: Commit messages are fetched via
git logand used for changelog generation.\n - Boundary markers: No explicit markers are used to delimit the commit messages from instructions.\n
- Capability inventory: The skill utilizes
Bash,Write, andEdittools to perform its tasks.\n - Sanitization: No content validation or sanitization of commit messages is implemented.
Audit Metadata