Git Commit Helper Pro

• Analyzed: May 15, 2026, 7:28 AM
• Findings: 1
• Version: 1.0.0
• Hash: a9ec064418cd8f735ab5494d375eeada935107f022489f657a657e203febf45f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The 'git-commit-helper-pro' skill is a legitimate utility designed to automate the generation of Git commit messages by analyzing repository changes. The core logic in `index.js` uses `child_process.execSync` to execute standard Git commands (`git diff --stat`), but these calls use hardcoded strings and do not incorporate unsanitized user input, preventing shell injection. The skill contains no external dependencies, no network activity, and no instructions in `SKILL.md` that would suggest malicious intent or data exfiltration.