asc-whats-new-writer — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

Gen Agent Trust Hub
pass
This skill generates App Store release notes by processing git logs and user-provided text. It is susceptible to indirect prompt injection because it ingests untrusted data from commit messages without explicit boundary markers or sanitization, though the risk is limited to the content of the generated notes.
Risk: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONApr 17, 2026Full report
Socket
pass
No alerts
Apr 17, 2026Full report
Snyk
pass
Risk: LOW · No issues
Risk: LOWApr 17, 2026Full report

asc-whats-new-writer — security audits

Passed all audits

Gen Agent Trust Hub
pass
This skill generates App Store release notes by processing git logs and user-provided text. It is susceptible to indirect prompt injection because it ingests untrusted data from commit messages without explicit boundary markers or sanitization, though the risk is limited to the content of the generated notes.
Risk: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONApr 17, 2026Full report
Socket
pass
No alerts
Apr 17, 2026Full report
Snyk
pass
Risk: LOW · No issues
Risk: LOWApr 17, 2026Full report