OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Apr 15, 2026
Independent checks from skills.sh's audit partners.
The skill is a productivity tool for generating changelogs from git commits or feature lists. It is functional and generally safe, but it contains an indirect prompt injection surface because it processes untrusted user-supplied text and has the capability to write files via integrated MCP tools.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed