committing-with-commitlint
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npx commitlintto inspect the repository's configuration and validate commit messages against defined rules. This is a standard and safe operation for development environments.- [EXTERNAL_DOWNLOADS]: Executingnpx commitlintmay involve fetching thecommitlintpackage from the official npm registry if it is not already installed locally. This uses a well-known service and package registry in a transparent manner.- [SAFE]: The skill ingests untrusted data from local repository configuration files to determine the required commit message format. - Ingestion points:
.commitlintrc,package.json, and other standard root-level configuration files. - Boundary markers: Data is read as structured output using the
--print-config jsonflag. - Capability inventory: Execution of the
npxutility for tool discovery and validation. - Sanitization: Relies on the internal parsing logic of the
commitlinttool to process configuration values.
Audit Metadata