git-commit-guide
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script
check-git.shthat executes localgitcommands to inspect the repository status, including checking the Git version, verifying the presence of a repository, and reading configuration such asuser.nameanduser.email. It also parses the last five commit messages to validate their format against the Conventional Commits specification. These operations are read-only and consistent with the skill's purpose as a repository linter. - [EXTERNAL_DOWNLOADS]: The documentation in
SKILL.mdsuggests that users install external Node.js packages (commitizenandcz-conventional-changelog) to facilitate better commit practices. These are well-known industry standard tools and are provided as manual installation recommendations rather than automated execution steps.
Audit Metadata