conventional-committer

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run local git commands such as git add, git commit, and git status, along with development tools like pnpm for type-checking and linting. These commands are standard for a development environment and are used as intended for repository management.- [DATA_INGESTION]: The skill processes untrusted code changes and project documentation to generate commit messages, which represents a surface for indirect prompt injection. 1. Ingestion points: Git status output and files at ../../../docs/plan/todo.md and ../../../docs/standards/development.md. 2. Boundary markers: None present. 3. Capability inventory: Execution of git commands and local scripts. 4. Sanitization: None present. This is considered safe as it is a standard part of the code management workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 11:35 AM