update-changelog
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands including
git,jq,cat, andghto perform its core functions of inspecting repository state, updating version strings, and managing release metadata. These commands are standard for a changelog automation tool and are used appropriately within the project scope. - [COMMAND_EXECUTION]: Includes a bundled shell script
scripts/parse-changelog.shwhich utilizesawkto transform markdown-formatted changelog data into structured JSON for internal processing. The script operates only on local files provided as arguments. - [COMMAND_EXECUTION]: The workflow incorporates robust human-in-the-loop security by requiring explicit user confirmation (Step 5 and Step 8) before executing any state-changing actions such as
git commit,git tag, orgh release create. - [SAFE]: No evidence of unauthorized data exfiltration, credential harvesting, or remote code downloads from untrusted sources was found. The skill operates exclusively on the local repository and standard development environment tools.
Audit Metadata