git-commit
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the local git repository, including
git add,git commit, andgit tag. These operations are well-defined within the skill's purpose as a git automation tool. - [SAFE]: The version calculation script
scripts/calver.pyusessubprocess.runwith a static argument list['git', 'tag', '-l']and withoutshell=True, which is a secure implementation. The script only processes local git tag data using strict regular expression matching. - [SAFE]: No network activity, remote script downloads, or sensitive file access patterns were identified. The skill operates entirely within the context of the local project directory.
Audit Metadata