Security audit
App Store Changelog
Security checks for vulnerabilities and agentic risk
Overview
This skill is a straightforward release-notes helper that reads local git history to draft App Store changelogs, with no evidence of hidden, destructive, credential, network, or persistent behavior.
Install this only for repositories where commit messages, file names, and local repository paths are appropriate for the agent to inspect. Review the generated release notes before publishing to ensure internal details are not exposed.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.