commit
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements strict safety guards (Phase 1) that prevent direct commits to protected branches like
main,master, anddevvia shell scripts. - [SAFE]: Automated dependency management and local validation steps (Phase 2) use standard tools (
poetry,npm,ruff,mypy) within the user's project environment to ensure code quality before committing. - [SAFE]: The
scripts/validate-conventional.shutility is a benign bash script that performs string pattern matching to enforce commit message formatting rules. - [SAFE]: The
PreToolUsehook in the frontmatter loads a local plugin hook (skill/commit-convention-loader) using a standard path resolution, which is a supported platform pattern for extending agent capabilities. - [SAFE]: All network operations (implied by
git pushornpm install) are standard developer workflows and do not target suspicious or unknown third-party domains.
Audit Metadata