setup-pre-commit

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install well-known Node.js packages (husky, lint-staged, prettier) using the project's detected package manager.
  • [COMMAND_EXECUTION]: The skill uses standard initialization commands such as npx husky init and triggers local scripts like npm run typecheck and npm run test within the configured Git hooks.
  • [PERSISTENCE_MECHANISMS]: The skill creates a Git pre-commit hook in the .husky/ directory. While Git hooks execute code automatically during development workflows, this is the explicit and primary purpose of the skill as requested by the user.
  • [SAFE]: The skill includes disable-model-invocation: true in its configuration, which restricts the AI's ability to autonomously invoke other tools during the setup process, providing an additional layer of predictability.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 04:24 PM
Security Audit — agent-trust-hub — setup-pre-commit