setup-pre-commit

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs well-known development tools including husky, lint-staged, and prettier as devDependencies. These are standard industry tools for code quality and git hooks.
  • [COMMAND_EXECUTION]: The skill executes package manager commands (npm, pnpm, yarn, or bun) and uses npx to initialize Husky. The use of the --no-install flag is a security hardening measure that prevents the tool from fetching and executing unverified packages from the remote registry if they are not already present in the local node_modules.
  • [PERSISTENCE]: The skill creates a git pre-commit hook in the .husky/ directory. While this causes code to execute automatically during git operations, it is the primary intended function of the skill and follows standard development practices for maintaining code quality.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 02:00 AM