git-hygiene-enforcer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard development dependencies from the NPM registry, including
@commitlint/cli,@commitlint/config-conventional, andhusky. It also references an external GitHub repository (compilerla/conventional-pre-commit) for use with the Python pre-commit framework. - [COMMAND_EXECUTION]: Provides standard shell script examples for local Git hooks and GitHub Actions workflow YAMLs designed to automate branch naming and commit message validation.
- [INDIRECT_PROMPT_INJECTION]: The skill defines templates for commit messages and pull request descriptions. Because these fields ingest arbitrary text from users/contributors to be processed by the agent or CI tools, they represent a potential surface for indirect prompt injection.
- [SAFE]: The skill encourages secure repository practices, such as excluding environment files (
.env) via.gitignore, requiring signed commits, and enforcing branch protection rules.
Audit Metadata