📦
Historial de auditorías
ghe-changelog - 8 auditorías
Comparación de versiones
Cambios de capacidades y hallazgos entre versiones auditadas, primero las más recientes.
| Versión | Fecha | Resultado | Elementos de revisión | Cambio vs anterior |
|---|---|---|---|---|
| v8 Más reciente | 6 jul 2026, 12:17 | 2 confirmado | 48 | Sin cambios de capacidad |
| v7 | 6 jul 2026, 12:17 | 2 confirmado | 48 | Sin cambios de capacidad |
| v6 | 29 jun 2026, 23:48 | 4 confirmado | 0 | Sin cambios de capacidad |
| v5 | 17 ene 2026, 06:57 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v4 | 17 ene 2026, 06:57 | Sin hallazgos confirmados | 0 | Comandos externosAcceso al sistema de archivos |
| v3 | 10 ene 2026, 14:35 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v2 | 10 ene 2026, 14:35 | Sin hallazgos confirmados | 0 | Sin cambios de capacidad |
| v1 | 10 ene 2026, 14:35 | Sin hallazgos confirmados | 0 | Base |
Versión de auditoría 8 Más reciente
6 jul 2026, 12:17
The skill contains legitimate changelog automation, but it directs agents to run shell, git, and GitHub CLI commands and to write project files. The most serious concerns are the prompt-injection-style absolute instruction language, mandatory external report posting, and permission to write ~/.claude configuration.
1
Archivos escaneados
352
Líneas analizadas
52
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (2)
Alto
Prompt Injection Attempt Detected
SKILL.md declares "THIS LAW IS ABSOLUTE" and says every user word must be followed with "no exceptions". This attempts to override normal instruction hierarchy and can pressure an agent to obey unsafe requests.
The language uses absolute authority and no-exception wording to control agent behavior. It does not explicitly say to ignore system instructions, so the confidence is high but not critical.
Alto
Mandatory External Report Disclosure
SKILL.md requires all reports to be posted to a GitHub issue thread as "Full report text". This can disclose project, security, or implementation details outside the local workspace without per-report consent.
The instruction explicitly mandates external publication, not just local changelog storage. The exact sensitivity depends on the project, so confidence is high but not absolute.
Elementos de revisión de capacidades (48)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Hidden file in home directory
- ~/.claude (for plugin/settings fixes)
The skill explicitly permits writes to ~/.claude for plugin or settings fixes. That hidden home directory can control AI tool behavior, so this is a real configuration-tampering risk.
Alto
Hidden file access
- ~/.claude (for plugin/settings fixes)
The referenced ~/.claude path is outside the project and stores hidden tool configuration. Allowing a skill to write there creates persistence and settings-modification risk.
Medio
SKILL.md:79-120SKILL.md:124-135SKILL.md:151-198SKILL.md:218-247SKILL.md:251-289SKILL.md:295-315SKILL.md:319-333
Ruby/shell backtick execution · 7 apariciones
```bash
Although the detector label is imprecise, this location starts a bash block with runnable shell automation. The block invokes git or shell utilities, so it remains external command guidance.
Medio
Shell command substitution
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
COMMITS=$(git log --oneline)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
COMMITS=$(git log --oneline ${LAST_TAG}..HEAD)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
HASH=$(echo "$commit" | cut -d' ' -f1)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
MSG=$(echo "$commit" | cut -d' ' -f2-)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
FILES=$(git diff-tree --no-commit-id --name-only -r "$HASH")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
FILE=$(echo "$line" | awk '{print $1}')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
INSERTIONS=$(echo "$line" | grep -oP '\d+(?= insertion)')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
DELETIONS=$(echo "$line" | grep -oP '\d+(?= deletion)')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
NEW_REQS=$(git diff "$SINCE" --diff-filter=A --name-only -- "REQUIREMENTS/*.md")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution · 3 apariciones
REQ_ID=$(grep "^req_id:" "$req" | cut -d' ' -f2)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
TITLE=$(grep "^# REQ-" "$req" | sed 's/^# //')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
MOD_REQS=$(git diff "$SINCE" --diff-filter=M --name-only -- "REQUIREMENTS/*.md")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
OLD_VER=$(git show "$SINCE:$req" 2>/dev/null | grep "^version:" | cut -d' ' -f2)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
NEW_VER=$(grep "^version:" "$req" | cut -d' ' -f2)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
DEP_REQS=$(git diff "$SINCE" --name-only -- "REQUIREMENTS/*.md" | while read req; do
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
ARCH_CHANGES=$(git diff "$SINCE" --name-only -- \
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
STRUCT_CHANGES=$(git diff "$SINCE" --summary | grep -E "^(create|rename|delete) mode")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
INTERFACE_CHANGES=$(git diff "$SINCE" -- "**/*.py" | grep -E "^[\+\-].*def __init__|^[\+\-].*class |
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "initial")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
DATE=$(date +%Y-%m-%d)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
NEW_ENTRIES=$(cat <<EOF
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(git log "$LAST_TAG"..HEAD --oneline --grep="^change\|^update\|^refactor" | sed 's/^[a-f0-9]* /- /'
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(git log "$LAST_TAG"..HEAD --oneline --grep="^fix\|^bug\|^patch" | sed 's/^[a-f0-9]* /- /')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(generate_req_changelog "$LAST_TAG")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(detect_design_changes "$LAST_TAG")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
ISSUE_TITLE=$(gh issue view "$ISSUE" --json title --jq '.title')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
local DATE=$(date +%Y-%m-%d)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
SKILL.md:79-120SKILL.md:124-135SKILL.md:151-198SKILL.md:218-247SKILL.md:251-289SKILL.md:295-315SKILL.md:319-333
Template literal with command substitution · 7 apariciones
```bash
The flagged bash block contains command substitutions and shell pipelines that an agent may run for changelog generation. The workflow is legitimate, but the external command behavior is real.
Medio
Unix shell invocation · 2 apariciones
#!/bin/bash
The shebang marks a runnable bash example for changelog automation. It expands the skill execution surface by encouraging shell-based git and file operations.
Factores de riesgo
⚙️ Comandos externos (62)
SKILL.md:39 SKILL.md:40 SKILL.md:61-73 SKILL.md:73-79 SKILL.md:79-120 SKILL.md:120-124 SKILL.md:124-135 SKILL.md:135-145 SKILL.md:145-151 SKILL.md:151-198 SKILL.md:198-204 SKILL.md:204-214 SKILL.md:214-218 SKILL.md:218-247 SKILL.md:247-251 SKILL.md:251-289 SKILL.md:289-295 SKILL.md:295-315 SKILL.md:315-319 SKILL.md:319-333 SKILL.md:333-337 SKILL.md:337-338 SKILL.md:338-343 SKILL.md:84 SKILL.md:86 SKILL.md:88 SKILL.md:99 SKILL.md:100 SKILL.md:103 SKILL.md:131 SKILL.md:132 SKILL.md:133 SKILL.md:160 SKILL.md:164 SKILL.md:165 SKILL.md:172 SKILL.md:176 SKILL.md:177 SKILL.md:178 SKILL.md:185-189 SKILL.md:193 SKILL.md:224-229 SKILL.md:232 SKILL.md:235 SKILL.md:258 SKILL.md:259 SKILL.md:265-270 SKILL.md:273 SKILL.md:276 SKILL.md:278 SKILL.md:280 SKILL.md:301 SKILL.md:323 SKILL.md:79-120 SKILL.md:124-135 SKILL.md:151-198 SKILL.md:218-247 SKILL.md:251-289 SKILL.md:295-315 SKILL.md:319-333 SKILL.md:80 SKILL.md:252
📁 Acceso al sistema de archivos (6)
Auditado por: codex
6 jul 2026, 12:17
The skill contains legitimate changelog automation, but it directs agents to run shell, git, and GitHub CLI commands and to write project files. The most serious concerns are the prompt-injection-style absolute instruction language, mandatory external report posting, and permission to write ~/.claude configuration.
1
Archivos escaneados
352
Líneas analizadas
52
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (2)
Alto
Prompt Injection Attempt Detected
SKILL.md declares "THIS LAW IS ABSOLUTE" and says every user word must be followed with "no exceptions". This attempts to override normal instruction hierarchy and can pressure an agent to obey unsafe requests.
The language uses absolute authority and no-exception wording to control agent behavior. It does not explicitly say to ignore system instructions, so the confidence is high but not critical.
Alto
Mandatory External Report Disclosure
SKILL.md requires all reports to be posted to a GitHub issue thread as "Full report text". This can disclose project, security, or implementation details outside the local workspace without per-report consent.
The instruction explicitly mandates external publication, not just local changelog storage. The exact sensitivity depends on the project, so confidence is high but not absolute.
Elementos de revisión de capacidades (48)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Hidden file in home directory
- ~/.claude (for plugin/settings fixes)
The skill explicitly permits writes to ~/.claude for plugin or settings fixes. That hidden home directory can control AI tool behavior, so this is a real configuration-tampering risk.
Alto
Hidden file access
- ~/.claude (for plugin/settings fixes)
The referenced ~/.claude path is outside the project and stores hidden tool configuration. Allowing a skill to write there creates persistence and settings-modification risk.
Medio
SKILL.md:79-120SKILL.md:124-135SKILL.md:151-198SKILL.md:218-247SKILL.md:251-289SKILL.md:295-315SKILL.md:319-333
Ruby/shell backtick execution · 7 apariciones
```bash
Although the detector label is imprecise, this location starts a bash block with runnable shell automation. The block invokes git or shell utilities, so it remains external command guidance.
Medio
Shell command substitution
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
COMMITS=$(git log --oneline)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
COMMITS=$(git log --oneline ${LAST_TAG}..HEAD)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
HASH=$(echo "$commit" | cut -d' ' -f1)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
MSG=$(echo "$commit" | cut -d' ' -f2-)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
FILES=$(git diff-tree --no-commit-id --name-only -r "$HASH")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
FILE=$(echo "$line" | awk '{print $1}')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
INSERTIONS=$(echo "$line" | grep -oP '\d+(?= insertion)')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
DELETIONS=$(echo "$line" | grep -oP '\d+(?= deletion)')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
NEW_REQS=$(git diff "$SINCE" --diff-filter=A --name-only -- "REQUIREMENTS/*.md")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution · 3 apariciones
REQ_ID=$(grep "^req_id:" "$req" | cut -d' ' -f2)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
TITLE=$(grep "^# REQ-" "$req" | sed 's/^# //')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
MOD_REQS=$(git diff "$SINCE" --diff-filter=M --name-only -- "REQUIREMENTS/*.md")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
OLD_VER=$(git show "$SINCE:$req" 2>/dev/null | grep "^version:" | cut -d' ' -f2)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
NEW_VER=$(grep "^version:" "$req" | cut -d' ' -f2)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
DEP_REQS=$(git diff "$SINCE" --name-only -- "REQUIREMENTS/*.md" | while read req; do
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
ARCH_CHANGES=$(git diff "$SINCE" --name-only -- \
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
STRUCT_CHANGES=$(git diff "$SINCE" --summary | grep -E "^(create|rename|delete) mode")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
INTERFACE_CHANGES=$(git diff "$SINCE" -- "**/*.py" | grep -E "^[\+\-].*def __init__|^[\+\-].*class |
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
LAST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "initial")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
DATE=$(date +%Y-%m-%d)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
NEW_ENTRIES=$(cat <<EOF
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(git log "$LAST_TAG"..HEAD --oneline --grep="^change\|^update\|^refactor" | sed 's/^[a-f0-9]* /- /'
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(git log "$LAST_TAG"..HEAD --oneline --grep="^fix\|^bug\|^patch" | sed 's/^[a-f0-9]* /- /')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(generate_req_changelog "$LAST_TAG")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
$(detect_design_changes "$LAST_TAG")
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
ISSUE_TITLE=$(gh issue view "$ISSUE" --json title --jq '.title')
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
Shell command substitution
local DATE=$(date +%Y-%m-%d)
The line uses shell command substitution to run git, grep, sed, date, gh, or related tools while generating changelog content. This is intended automation, but it is real external command execution over repository data.
Medio
SKILL.md:79-120SKILL.md:124-135SKILL.md:151-198SKILL.md:218-247SKILL.md:251-289SKILL.md:295-315SKILL.md:319-333
Template literal with command substitution · 7 apariciones
```bash
The flagged bash block contains command substitutions and shell pipelines that an agent may run for changelog generation. The workflow is legitimate, but the external command behavior is real.
Medio
Unix shell invocation · 2 apariciones
#!/bin/bash
The shebang marks a runnable bash example for changelog automation. It expands the skill execution surface by encouraging shell-based git and file operations.
Factores de riesgo
⚙️ Comandos externos (62)
SKILL.md:39 SKILL.md:40 SKILL.md:61-73 SKILL.md:73-79 SKILL.md:79-120 SKILL.md:120-124 SKILL.md:124-135 SKILL.md:135-145 SKILL.md:145-151 SKILL.md:151-198 SKILL.md:198-204 SKILL.md:204-214 SKILL.md:214-218 SKILL.md:218-247 SKILL.md:247-251 SKILL.md:251-289 SKILL.md:289-295 SKILL.md:295-315 SKILL.md:315-319 SKILL.md:319-333 SKILL.md:333-337 SKILL.md:337-338 SKILL.md:338-343 SKILL.md:84 SKILL.md:86 SKILL.md:88 SKILL.md:99 SKILL.md:100 SKILL.md:103 SKILL.md:131 SKILL.md:132 SKILL.md:133 SKILL.md:160 SKILL.md:164 SKILL.md:165 SKILL.md:172 SKILL.md:176 SKILL.md:177 SKILL.md:178 SKILL.md:185-189 SKILL.md:193 SKILL.md:224-229 SKILL.md:232 SKILL.md:235 SKILL.md:258 SKILL.md:259 SKILL.md:265-270 SKILL.md:273 SKILL.md:276 SKILL.md:278 SKILL.md:280 SKILL.md:301 SKILL.md:323 SKILL.md:79-120 SKILL.md:124-135 SKILL.md:151-198 SKILL.md:218-247 SKILL.md:251-289 SKILL.md:295-315 SKILL.md:319-333 SKILL.md:80 SKILL.md:252
📁 Acceso al sistema de archivos (6)
Auditado por: codex
29 jun 2026, 23:48
Static external-command findings are mostly legitimate shell examples for changelog automation, but they still execute git, sed, gh, and file mutation commands if followed. The static weak-cryptography matches appear to be false positives from changelog and markdown text. Publication should be blocked because the skill includes prompt-injection style instructions that demand verbatim obedience to user specifications with no exceptions.
1
Archivos escaneados
352
Líneas analizadas
6
Elementos de revisión
2
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (4)
Crítico
Prompt Injection Attempt Detected
The skill tells the agent that user specifications are absolute, must be followed verbatim, and admit no exceptions. This can override higher-priority safety and marketplace review instructions when the skill is loaded.
The text explicitly creates an absolute instruction hierarchy around user requests. That semantic context confirms a prompt-injection risk rather than a benign changelog instruction.
Alto
Permission to Modify Assistant Configuration
The skill permits writes to ~/.claude for plugin and settings fixes. A marketplace skill should not broadly authorize changes to hidden assistant configuration because that can create persistence or alter future agent behavior.
The hidden home-directory path is explicit and the stated purpose is settings modification. No malicious payload is shown, but the capability is sensitive.
Medio
Shell-Based Changelog Automation Examples
The skill includes shell snippets that run git, grep, sed, cp, and date commands, then modify CHANGELOG.md. These commands match the skill purpose, but they can overwrite files or process untrusted repository content if copied and executed without review.
The command execution and file mutation are directly visible, but they are presented as changelog tooling. The risk is operational misuse rather than confirmed malicious behavior.
Medio
External GitHub CLI Data Used in Changelog Output
The skill fetches an issue title with gh and appends it to CHANGELOG.md. Issue titles are external content and could inject misleading markdown into release notes if not reviewed.
The gh command and append operations are explicit. The risk depends on repository issue permissions and review practices, so confidence is high but not absolute.
Falsos positivos estáticos ignorados (2)
Estas coincidencias estáticas fueron descartadas por la revisión semántica o coincidieron con tokens solo de esquema, por lo que se muestran por transparencia, pero no afectan la puntuación de calidad.
Bajo
Static Weak-Cryptography Alerts Are False Positives
The weak-cryptography alerts do not correspond to hashing, encryption, or credential handling logic in the reviewed skill. They appear to match ordinary changelog, markdown, and git-related text.
No cryptographic API, weak digest use, or security-sensitive hashing operation appears at the cited locations. The cited lines are descriptive text or configuration examples.
Bajo
Device-File Alerts Are Benign Stderr Redirections
The scanner flagged standard device-file access, but the cited examples use stderr redirection to suppress command errors. This is common shell behavior, though it can hide useful diagnostics.
The cited patterns are 2>/dev/null redirections in shell examples, not reads or writes to sensitive device files. The only concern is reduced visibility into failures.
Factores de riesgo
⚙️ Comandos externos (7)
📁 Acceso al sistema de archivos (3)
Patrones detectados
Absolute Agent Instruction LanguageMutable Shell Workflow
Auditado por: codex
17 ene 2026, 06:57
Pure documentation skill containing only reference bash scripts for changelog management. All static findings are FALSE POSITIVES - the scanner misidentified git command documentation as security risks. The skill contains no executable code, makes no network calls, and performs no sensitive operations. Shell command patterns in documentation are legitimate git operations for version tracking.
2
Archivos escaneados
538
Líneas analizadas
2
Elementos de revisión
0
Falsos positivos ignorados
Factores de riesgo
⚙️ Comandos externos (62)
SKILL.md:39 SKILL.md:40 SKILL.md:61-73 SKILL.md:73-79 SKILL.md:79-120 SKILL.md:120-124 SKILL.md:124-135 SKILL.md:135-145 SKILL.md:145-151 SKILL.md:151-198 SKILL.md:198-204 SKILL.md:204-214 SKILL.md:214-218 SKILL.md:218-247 SKILL.md:247-251 SKILL.md:251-289 SKILL.md:289-295 SKILL.md:295-315 SKILL.md:315-319 SKILL.md:319-333 SKILL.md:333-337 SKILL.md:337-338 SKILL.md:338-343 SKILL.md:84 SKILL.md:86 SKILL.md:88 SKILL.md:99 SKILL.md:100 SKILL.md:103 SKILL.md:131 SKILL.md:132 SKILL.md:133 SKILL.md:160 SKILL.md:164 SKILL.md:165 SKILL.md:172 SKILL.md:176 SKILL.md:177 SKILL.md:178 SKILL.md:185-189 SKILL.md:193 SKILL.md:224-229 SKILL.md:232 SKILL.md:235 SKILL.md:258 SKILL.md:259 SKILL.md:265-270 SKILL.md:273 SKILL.md:276 SKILL.md:278 SKILL.md:280 SKILL.md:301 SKILL.md:323 SKILL.md:79-120 SKILL.md:124-135 SKILL.md:151-198 SKILL.md:218-247 SKILL.md:251-289 SKILL.md:295-315 SKILL.md:319-333 SKILL.md:80 SKILL.md:252
📁 Acceso al sistema de archivos (6)
Auditado por: claude
17 ene 2026, 06:57
Pure documentation skill containing only reference bash scripts for changelog management. All static findings are FALSE POSITIVES - the scanner misidentified git command documentation as security risks. The skill contains no executable code, makes no network calls, and performs no sensitive operations. Shell command patterns in documentation are legitimate git operations for version tracking.
2
Archivos escaneados
538
Líneas analizadas
2
Elementos de revisión
0
Falsos positivos ignorados
Factores de riesgo
⚙️ Comandos externos (62)
SKILL.md:39 SKILL.md:40 SKILL.md:61-73 SKILL.md:73-79 SKILL.md:79-120 SKILL.md:120-124 SKILL.md:124-135 SKILL.md:135-145 SKILL.md:145-151 SKILL.md:151-198 SKILL.md:198-204 SKILL.md:204-214 SKILL.md:214-218 SKILL.md:218-247 SKILL.md:247-251 SKILL.md:251-289 SKILL.md:289-295 SKILL.md:295-315 SKILL.md:315-319 SKILL.md:319-333 SKILL.md:333-337 SKILL.md:337-338 SKILL.md:338-343 SKILL.md:84 SKILL.md:86 SKILL.md:88 SKILL.md:99 SKILL.md:100 SKILL.md:103 SKILL.md:131 SKILL.md:132 SKILL.md:133 SKILL.md:160 SKILL.md:164 SKILL.md:165 SKILL.md:172 SKILL.md:176 SKILL.md:177 SKILL.md:178 SKILL.md:185-189 SKILL.md:193 SKILL.md:224-229 SKILL.md:232 SKILL.md:235 SKILL.md:258 SKILL.md:259 SKILL.md:265-270 SKILL.md:273 SKILL.md:276 SKILL.md:278 SKILL.md:280 SKILL.md:301 SKILL.md:323 SKILL.md:79-120 SKILL.md:124-135 SKILL.md:151-198 SKILL.md:218-247 SKILL.md:251-289 SKILL.md:295-315 SKILL.md:319-333 SKILL.md:80 SKILL.md:252
📁 Acceso al sistema de archivos (6)
Auditado por: claude
10 ene 2026, 14:35
Pure prompt-based skill containing only documentation and example bash scripts embedded as reference material. No executable files, network calls, or sensitive operations. The skill provides instructions for changelog management using git commands.
1
Archivos escaneados
352
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: claude
10 ene 2026, 14:35
Pure prompt-based skill containing only documentation and example bash scripts embedded as reference material. No executable files, network calls, or sensitive operations. The skill provides instructions for changelog management using git commands.
1
Archivos escaneados
352
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: claude
10 ene 2026, 14:35
Pure prompt-based skill containing only documentation and example bash scripts embedded as reference material. No executable files, network calls, or sensitive operations. The skill provides instructions for changelog management using git commands.
1
Archivos escaneados
352
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados
No se registraron hallazgos de seguridad confirmados en esta auditoría completada.
Auditado por: claude