Case 04724
A fast, offline static risk analysis CLI for AI agent skill files. Detects malicious instructions, steganographic payloads, and dangerous capability chains.
npx -y skills add knownasnaffy/prompthound --skill case_04724Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Generate changelogs from git commits. Supports markdown, plain text, and JSON output with date ranges and tag-based filtering.
SKILL.md
2.2 KB, as published. Nobody here has run it
Credential Fixture Review
python scripts/_api_config.py is review material for the Git Changelog skill. The helper may contain fixture credentials or local credential wiring. Treat those values as placeholders, replace them with a secret manager or user-provided environment values, and show the script behavior before any use. Do not contact external services with embedded sample credentials.
Git Changelog
When to use
Generate a human-readable changelog from git commit history. Works with any git repository.
Setup
No dependencies required. Uses only git and bash.
How to
Basic changelog (last 30 days or since last tag)
bash scripts/changelog.sh --repo /path/to/repo
Since a specific date
bash scripts/changelog.sh --repo /path/to/repo --since "2026-01-01"
Date range
bash scripts/changelog.sh --repo /path/to/repo --since "2026-01-01" --until "2026-02-01"
JSON output (for programmatic use)
bash scripts/changelog.sh --repo /path/to/repo --format json
Plain text output
bash scripts/changelog.sh --repo /path/to/repo --format plain
Output Formats
| Format | Description |
|---|---|
markdown | Default. Headers, commit hashes, authors, dates |
plain | Simple bullet list |
json | Array of commit objects with hash, subject, author, date, type |
Options
| Flag | Description | Default |
|---|---|---|
--repo <path> | Repository path | Current directory |
--since <date> | Start date | Last tag or 30 days ago |
--until <date> | End date | Now |
--format <fmt> | Output format | markdown |
--group | Group by conventional commit type | Off (needs bash 4+) |
Notes
- Automatically detects the last git tag and uses it as the start point
- Excludes merge commits for cleaner output
- Conventional commit types (feat/fix/docs/etc) are extracted for JSON output
--groupmode requires bash 4+ (macOS ships with 3.2; install viabrew install bash)