OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 14, 2026
Independent checks from skills.sh's audit partners.
The skill is a development tool for generating changelogs and release notes from version control history. It carries a low risk of indirect prompt injection because it processes untrusted commit messages and pull request descriptions. It also involves executing shell commands and scripts, which are consistent with its intended purpose.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed