git-commit-message-preparation
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Executes standard Git inspection commands (
git status,git diff) to gather technical evidence for commit messages. These operations are scoped to local repository state and do not involve shell injection or remote execution. - [SAFE]: Implements a security boundary by instructing the agent to stop immediately if sensitive data (secrets, credentials) is detected within the Git diffs.
- [SAFE]: Explicitly forbids state-changing Git actions, including staging files, creating commits, or pushing branches, ensuring the skill remains read-only.
- [DATA_EXFILTRATION]: Reads local project documentation files (
AGENTS.md,QUALITY.md) to ensure compliance with architectural rules. There are no network-based exfiltration patterns or external URL requests detected.
Audit Metadata