git-conventional-commit
Pass
Audited by Gen Agent Trust Hub on May 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Git commands (
git status,git diff,git log,git add,git commit) necessary for its functionality. It avoids high-risk commands and implements multi-line commits using HEREDOC with quoted delimiters ('EOF'), which prevents unintended variable expansion and shell injection. - [DATA_EXPOSURE]: The instructions include a specific security check to identify sensitive files such as
.envor credential files and warn the user before they are staged. This is a proactive measure against accidental data exposure in version control. - [PROMPT_INJECTION]: The skill maintains a clear instructional focus without attempting to bypass safety guidelines or override system constraints.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local environment (the output of
git diff). While this is a potential attack surface for indirect injection, the risk is mitigated by the instruction to confirm specific files before staging and the use of restricted Git commands.
Audit Metadata