setup-pre-commit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard package managers to install well-known development tools including husky, lint-staged, and prettier, and executes initialization commands like npx husky init and pre-commit install.
- [PRIVILEGE_ESCALATION]: The instructions include chmod +x commands to ensure that Git hook scripts are executable by the system. This is a standard and necessary step for Git hooks to function and does not constitute unauthorized privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The commit-msg hook processes user-inputted commit messages to validate their format via regular expressions. The data is treated as a string for validation only and is not executed or passed to sensitive APIs, which mitigates the risk of injection attacks.
- [EXTERNAL_DOWNLOADS]: The skill downloads standard, well-known packages from official registries (npm and potentially PyPI). These are standard development dependencies and do not represent a security risk.
Audit Metadata