bump-version
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The instructions employ manipulative reinforcement techniques, such as claiming a formatting error is a "catastrophic error that may result in human death," to pressure the AI into strict compliance with output rules.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8). It retrieves commit messages from the project history and analyzes them to generate a changelog. Malicious commit messages authored by external contributors could contain hidden instructions intended to hijack the agent's behavior during the analysis phase.
- [COMMAND_EXECUTION]: The skill executes multiple shell commands, including
gitoperations and generic project build commands. Building a project is a significant attack surface, as it can trigger arbitrary code execution via build hooks (e.g.,npmscripts,Makefiles, orsetup.py) if the repository content is untrusted.
Audit Metadata