skills/zrong/skills/git-commit/Gen Agent Trust Hub

git-commit

Pass

Audited by Gen Agent Trust Hub on Apr 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local git repository, including git add, git commit, and git tag. These operations are well-defined within the skill's purpose as a git automation tool.
  • [SAFE]: The version calculation script scripts/calver.py uses subprocess.run with a static argument list ['git', 'tag', '-l'] and without shell=True, which is a secure implementation. The script only processes local git tag data using strict regular expression matching.
  • [SAFE]: No network activity, remote script downloads, or sensitive file access patterns were identified. The skill operates entirely within the context of the local project directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 10, 2026, 07:15 AM