generating-conventional-commits

SUSPICIOUS: The stated purpose is benign and there is no evidence of installers, credential harvesting, or external data routing, but the permission footprint is disproportionate. A commit-message skill should not need unrestricted Bash(cmd:*); this makes the skill higher risk than its narrow Git-helper purpose suggests.