kf-g-git-commit-staged-only-rules
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a restrictive and safe workflow for git operations. By requiring that only staged changes are committed and explicitly forbidding the agent from using 'git add' or 'git commit -a', it prevents accidental inclusion of sensitive files or untracked changes that the user did not intend to commit.
- [COMMAND_EXECUTION]: The skill specifies the use of standard git commands such as 'git status', 'git diff --cached', and 'git commit'. These commands are appropriate for the skill's purpose and are executed within a local version control context without involving network operations or privilege escalation.
- [DATA_EXPOSURE]: While the skill instructs the agent to read git diffs to generate commit messages, this is restricted to the local environment and the specific staged changes, which is necessary for its functionality. There are no patterns indicating exfiltration of this data to external services.
Audit Metadata