Dev Git Guard

• Risk level: Low
• Analyzed: May 1, 2026, 7:42 AM
• Findings: 1
• Version: 1.0.0

Overview

This instruction-only skill is coherent for a git workflow, but it will run repository checks and create local commits, so users should only install it if they want that behavior.

Before installing, make sure you are comfortable with the agent reviewing dirty git changes, running repository validation commands, and creating local commits as part of normal coding work. It does not show hidden code, credential use, network access, or background behavior.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Low

What this means

The agent may stage changes and create local commits during coding tasks, including at the end of a turn after validation.

Why it was flagged

The skill directs the agent to run local git workflows and create commits. This is purpose-aligned and disclosed, but it changes local repository history.

Skill content

If validation passes, stage the final diff and create a detailed Chinese git commit before sending the final response.

Recommendation

Install only if you want an agent to enforce commits automatically; review dirty worktree summaries and commit messages when repository history needs manual control.