skills/yonatangross/orchestkit/commit/Gen Agent Trust Hub

commit

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements strict safety guards (Phase 1) that prevent direct commits to protected branches like main, master, and dev via shell scripts.
  • [SAFE]: Automated dependency management and local validation steps (Phase 2) use standard tools (poetry, npm, ruff, mypy) within the user's project environment to ensure code quality before committing.
  • [SAFE]: The scripts/validate-conventional.sh utility is a benign bash script that performs string pattern matching to enforce commit message formatting rules.
  • [SAFE]: The PreToolUse hook in the frontmatter loads a local plugin hook (skill/commit-convention-loader) using a standard path resolution, which is a supported platform pattern for extending agent capabilities.
  • [SAFE]: All network operations (implied by git push or npm install) are standard developer workflows and do not target suspicious or unknown third-party domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:54 AM