conventional-commits
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard utility for generating Conventional Commits. It relies on typical developer tools like
git diffandgit logto provide context for the commit messages. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local repository (specifically via
git diff --stagedandgit log). While this introduces an attack surface where instructions embedded in code changes could attempt to influence the agent, the skill provides a strict output schema and decision tree which serves as a functional boundary. Given the intended purpose of the skill, this is a standard risk factor for any development-oriented tool.
Audit Metadata