compose-commit
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively uses standard git commands and local file system tools to perform its tasks.
- [SAFE]: It implements proactive security measures, such as warning users before committing potentially sensitive files like
.envand checking for GPG signing configurations. - [SAFE]: It ensures user oversight by requiring explicit confirmation via
AskUserQuestionfor critical actions, including committing to protected branches (main/master) or finalizing the proposed commit plan. - [SAFE]: Command construction for git commits uses safe patterns (such as quoted strings and heredocs) to prevent common shell injection issues.
- [SAFE]: No external network connections, data exfiltration attempts, or obfuscated code patterns were detected.
Audit Metadata