Generate conventional commit messages from code changes or diff.

PassAudited by ClawScan on May 13, 2026.

Overview

The skill is a coherent instruction-only helper for drafting conventional commit messages, with one minor note that an optional Git command should only run after user confirmation.

This skill appears safe for drafting commit messages. Before using it, review pasted diffs for secrets or private data, and do not allow any optional git commit action unless you explicitly want the repository changed.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If the optional Git integration is used, it could create a commit in the user's repository.

Why it was flagged

The skill primarily generates commit messages, but this optional enhancement would mutate the local Git repository if used.

Skill content

**Git 集成**：直接执行 `git commit -m "<message>"`

Recommendation

Only run any git commit command after the user selects a message and explicitly confirms they want to commit.