conventional-commits

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard utility for generating Conventional Commits. It relies on typical developer tools like git diff and git log to provide context for the commit messages.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository (specifically via git diff --staged and git log). While this introduces an attack surface where instructions embedded in code changes could attempt to influence the agent, the skill provides a strict output schema and decision tree which serves as a functional boundary. Given the intended purpose of the skill, this is a standard risk factor for any development-oriented tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 10:53 AM
Security Audit — agent-trust-hub — conventional-commits