conventional-commit-batcher
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands and Python scripts as part of its core functionality. Specifically,
scripts/precommit_safety_gate.pyandscripts/validate_conventional_commit.pyuse thesubprocessmodule to interact with Git. These calls are implemented using secure practices (e.g., passing arguments as lists and avoidingshell=True) to prevent command injection. - [COMMAND_EXECUTION]: The skill defines mandatory interception for
git add,git commit, andgit pushoperations. It uses platform-specific mechanisms (like Kiro'spreToolUsehooks) to ensure the agent follows the batching and safety-check workflow before executing these commands. - [SAFE]: The skill includes explicit instructions and code to detect and prevent the exposure of sensitive data. It scans Git diffs for patterns matching environment files, private keys, and hardcoded credentials, requiring explicit human confirmation if any are found.
- [SAFE]: The 'auto-execute' behavior is mitigated by hard-coded safety gates that force a pause and require user approval for high-risk actions, such as committing to protected branches or including large binary files.
Audit Metadata