conventional-commits
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional, defining a structured format for commit messages (types, scopes, descriptions) and requiring specific git flags like
--signofffor DCO compliance. - [EXTERNAL_DOWNLOADS]: Contains references to official documentation and community standards including the Conventional Commits specification, Semantic Versioning (semver.org), and Commitlint. These are well-known, trusted resources within the software development ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes code diffs to generate commit messages. While this represents an ingestion surface for untrusted data (e.g., malicious comments in a diff attempting to influence the commit message), the skill's primary purpose is to provide a formatting template. The risk is inherent to the task and managed by the agent's core guardrails and user review of the generated commit message.
Audit Metadata