conventional-committer
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run local git commands such as git add, git commit, and git status, along with development tools like pnpm for type-checking and linting. These commands are standard for a development environment and are used as intended for repository management.- [DATA_INGESTION]: The skill processes untrusted code changes and project documentation to generate commit messages, which represents a surface for indirect prompt injection. 1. Ingestion points: Git status output and files at ../../../docs/plan/todo.md and ../../../docs/standards/development.md. 2. Boundary markers: None present. 3. Capability inventory: Execution of git commands and local scripts. 4. Sanitization: None present. This is considered safe as it is a standard part of the code management workflow.
Audit Metadata