git-commit-writer
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/validate_commit_message.py) to validate commit messages. Thetests/test_validate_commit_message.pyfile usessubprocess.runto execute this script for testing purposes. This is a standard practice for CLI tool development and does not involve executing arbitrary user-provided shell commands or remote code. - [DATA_EXPOSURE]: The skill only accesses the commit message file provided as an argument or reads from standard input. It does not access sensitive files, environment variables, or credentials.
- [REMOTE_CODE_EXECUTION]: There are no remote downloads or executions of external code. All scripts are bundled locally within the skill.
- [PROMPT_INJECTION]: The
SKILL.mdinstructions focus on formatting requirements and do not contain patterns that attempt to override the AI's safety guidelines or core personality.
Audit Metadata