gitmoji-commits
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is well-documented and its functionality matches its stated purpose. It provides a local utility for Git commit message formatting.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to use standard Git commands (
git status,git diff,git add,git commit). These are the primary intended functions of the skill and do not pose a security risk in this context. - [DATA_EXFILTRATION]: No network operations or unauthorized data access patterns were detected. The
scripts/gitmoji_selector.shscript contains keywords like 'credentials' and 'secrets', but these are used strictly for pattern matching to suggest the security emoji (🔐) for relevant commits. - [EXTERNAL_DOWNLOADS]: The skill states it has no dependencies and does not perform any remote code downloads or package installations during runtime.
Audit Metadata