git-commit-granularity
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the agent to use standard Git operations such as
git status,git diff,git add -p,git commit, andgit rebase. These are routine developer commands. - [COMMAND_EXECUTION]: The skill suggests running common test and build commands (
npm test,pytest,make, etc.) to verify code integrity between commits. This is a standard safety practice in software development. - [COMMAND_EXECUTION]: The script
scripts/check_granularity.pyutilizessubprocess.runto execute Git commands. Analysis of the source code confirms that arguments are hardcoded string literals (e.g.,--cached,--name-only), which prevents command injection vulnerabilities. - [SAFE]: No evidence of data exfiltration, credential harvesting, obfuscation, or remote code execution was found. The skill operates locally on the user's repository diffs.
Audit Metadata