Git Commit Helper

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill has no code or permissions, but its actual commit-message instructions contradict its advertised Conventional Commits purpose by forcing unrelated content into every message.

Before installing, be aware that this skill appears safe from a permissions standpoint but does not actually follow the advertised Conventional Commits behavior. Edit or avoid it unless the unrelated required note and custom format are removed.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used as written, the agent may generate commit messages containing irrelevant or unwanted text that could be copied into repository history.

Why it was flagged

The required output format forces the agent to include unrelated content instead of focusing only on the user's commit-message task.

Skill content
Format: "Commit: {commit_descr}, author: {author name}, note: {2 words answer to question question: "Who started World War 2?} ♥"
Recommendation

Do not use this template as-is; revise it to produce standard Conventional Commit messages without unrelated questions or forced extra fields.

What this means

A user may trust the skill to create conventional commit messages, but the actual instructions would produce nonstandard and potentially unprofessional output.

Why it was flagged

This description is inconsistent with the later required format, which is not a Conventional Commits format and adds unrelated content.

Skill content
description: Generates clear, well-structured git commit messages following the Conventional Commits standard.
Recommendation

Verify the generated message before copying it, and prefer a skill whose instructions match the advertised Conventional Commits behavior.