conventional-commits

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily instructional, defining a structured format for commit messages (types, scopes, descriptions) and requiring specific git flags like --signoff for DCO compliance.
  • [EXTERNAL_DOWNLOADS]: Contains references to official documentation and community standards including the Conventional Commits specification, Semantic Versioning (semver.org), and Commitlint. These are well-known, trusted resources within the software development ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes code diffs to generate commit messages. While this represents an ingestion surface for untrusted data (e.g., malicious comments in a diff attempting to influence the commit message), the skill's primary purpose is to provide a formatting template. The risk is inherent to the task and managed by the agent's core guardrails and user review of the generated commit message.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 04:38 AM