tidy-commits

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard Git commands (rebase, reset, fetch, push) and shell utilities (cp, date) to manipulate repository history. This behavior is entirely consistent with its stated purpose.
  • [COMMAND_EXECUTION]: It automates interactive rebasing by overriding GIT_SEQUENCE_EDITOR to use a temporary todo file. This is a common automation pattern and does not involve executing untrusted remote code.
  • [SAFE]: No obfuscation, credential harvesting, or unauthorized data access patterns were found. The skill operates locally on the user's Git repository and follows safety best practices such as recommending --force-with-lease for pushing changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 06:41 AM
Security Audit — agent-trust-hub — tidy-commits