setup-pre-commit
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs standard development dependencies including
husky,lint-staged, andprettiervia the project's package manager. These are well-known tools from the official npm registry used for code quality management. - [COMMAND_EXECUTION]: The skill uses shell commands to initialize Husky (
npx husky init), run linting tools, and commit configuration changes to the repository. These operations are limited to the skill's primary purpose of repository configuration. - [INDIRECT_PROMPT_INJECTION]: The skill reads local project metadata to customize the pre-commit hooks.
- Ingestion points: Reads
package.jsonand lock files to detect the package manager and available scripts. - Boundary markers: Absent.
- Capability inventory: Executes package installation, Husky initialization, and git commits.
- Sanitization: The skill performs existence checks for specific script names (
test,typecheck) before referencing them, providing a basic level of validation against unexpected configurations.
Audit Metadata