prepare-commits

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements security-conscious constraints, specifically instructing the agent to never commit files that likely contain secrets, such as environment files (.env), keys, or tokens, and to provide a warning to the user instead.
  • [SAFE]: It maintains a strict human-in-the-loop requirement, explicitly forbidding the agent from performing git commit or push operations unless the user provides a direct request in that specific turn.
  • [SAFE]: The skill uses defensive shell scripting practices, such as suggesting HEREDOC format for git commit messages, which mitigates the risk of command injection if the generated commit message contains shell-sensitive characters.
  • [SAFE]: No external network requests, unauthorized file system access outside of the repository, or third-party dependencies were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 08:08 AM
Security Audit — agent-trust-hub — prepare-commits