git-commit-writer

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/validate_commit_message.py) to validate commit messages. The tests/test_validate_commit_message.py file uses subprocess.run to execute this script for testing purposes. This is a standard practice for CLI tool development and does not involve executing arbitrary user-provided shell commands or remote code.
  • [DATA_EXPOSURE]: The skill only accesses the commit message file provided as an argument or reads from standard input. It does not access sensitive files, environment variables, or credentials.
  • [REMOTE_CODE_EXECUTION]: There are no remote downloads or executions of external code. All scripts are bundled locally within the skill.
  • [PROMPT_INJECTION]: The SKILL.md instructions focus on formatting requirements and do not contain patterns that attempt to override the AI's safety guidelines or core personality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 08:30 PM
Security Audit — agent-trust-hub — git-commit-writer