jabraf-commitlint

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install several Node.js packages from the official NPM registry, including @jabraf/dev, husky, simple-git-hooks, and lefthook. These are standard development tools.
  • [COMMAND_EXECUTION]: The skill uses various shell commands to initialize tools and validate configuration, such as npx husky init, npx simple-git-hooks, and npx commitlint. These are typical for the stated purpose of the skill.
  • [COMMAND_EXECUTION]: The skill applies chmod +x to the .husky/commit-msg file. This is a standard and necessary requirement for Git hooks to function correctly.
  • [COMMAND_EXECUTION]: The skill modifies project configuration files including package.json, commitlint.config.js, and lefthook.yml. It includes strict instructions to never overwrite existing configurations or install hook managers without explicit user consent and showing a diff of the changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 11:17 AM
Security Audit — agent-trust-hub — jabraf-commitlint