setup-pre-commit
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs well-known development tools including
husky,lint-staged, andprettieras devDependencies. These are standard industry tools for code quality and git hooks. - [COMMAND_EXECUTION]: The skill executes package manager commands (npm, pnpm, yarn, or bun) and uses
npxto initialize Husky. The use of the--no-installflag is a security hardening measure that prevents the tool from fetching and executing unverified packages from the remote registry if they are not already present in the localnode_modules. - [PERSISTENCE]: The skill creates a git
pre-commithook in the.husky/directory. While this causes code to execute automatically during git operations, it is the primary intended function of the skill and follows standard development practices for maintaining code quality.
Audit Metadata