common-conventional-commits
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
git branch --show-currentto retrieve the current branch name. This is used solely to extract ticket identifiers for inclusion in the commit scope, which is a routine development task and poses no security risk in this context. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of git branch names and user-provided descriptions of changes. The logic is limited to string pattern matching (e.g.,
<PROJECT>-<number>) and formatting for the commit message, with no execution of the ingested data or access to sensitive resources.
Audit Metadata