skills/tukaelu/skills/compose-commit/Gen Agent Trust Hub

compose-commit

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill exclusively uses standard git commands and local file system tools to perform its tasks.
  • [SAFE]: It implements proactive security measures, such as warning users before committing potentially sensitive files like .env and checking for GPG signing configurations.
  • [SAFE]: It ensures user oversight by requiring explicit confirmation via AskUserQuestion for critical actions, including committing to protected branches (main/master) or finalizing the proposed commit plan.
  • [SAFE]: Command construction for git commits uses safe patterns (such as quoted strings and heredocs) to prevent common shell injection issues.
  • [SAFE]: No external network connections, data exfiltration attempts, or obfuscated code patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 12:27 AM
Security Audit — agent-trust-hub — compose-commit