Generate conventional commit messages from code changes or diff.

Security checks across static analysis, malware telemetry, and agentic risk

Overview

The skill is a coherent instruction-only helper for drafting conventional commit messages, with one minor note that an optional Git command should only run after user confirmation.

This skill appears safe for drafting commit messages. Before using it, review pasted diffs for secrets or private data, and do not allow any optional git commit action unless you explicitly want the repository changed.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If the optional Git integration is used, it could create a commit in the user's repository.

Why it was flagged

The skill primarily generates commit messages, but this optional enhancement would mutate the local Git repository if used.

Skill content
**Git 集成**:直接执行 `git commit -m "<message>"`
Recommendation

Only run any git commit command after the user selects a message and explicitly confirms they want to commit.