committing-with-commitlint

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes npx commitlint to inspect the repository's configuration and validate commit messages against defined rules. This is a standard and safe operation for development environments.- [EXTERNAL_DOWNLOADS]: Executing npx commitlint may involve fetching the commitlint package from the official npm registry if it is not already installed locally. This uses a well-known service and package registry in a transparent manner.- [SAFE]: The skill ingests untrusted data from local repository configuration files to determine the required commit message format.
  • Ingestion points: .commitlintrc, package.json, and other standard root-level configuration files.
  • Boundary markers: Data is read as structured output using the --print-config json flag.
  • Capability inventory: Execution of the npx utility for tool discovery and validation.
  • Sanitization: Relies on the internal parsing logic of the commitlint tool to process configuration values.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 12:17 PM
Security Audit — agent-trust-hub — committing-with-commitlint