rc-git-commit-push
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script to execute local
gitcommands. These executions are performed usingsubprocess.runwith a list of arguments andshell=False(implied by the list format), which is a secure method that prevents shell injection attacks. - [SAFE]: The script relies exclusively on Python's standard library and does not require external packages or remote code downloads. All commit message generation and repository analysis are performed locally within the user's environment.
- [SAFE]: The skill does not access sensitive files or hardcode credentials. It utilizes the user's existing local git configuration and environment for repository access and authentication (e.g., SSH keys or credential helpers).
Audit Metadata