Security audit

Git Conventional Commit

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward git commit helper whose repository changes are disclosed and aligned with its purpose.

Install only if you want an agent to help stage repository changes and create git commits. Before each commit, review `git status` and the staged diff so accidental files or secrets are not included.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (4)

Hidden Instructions

High

Category: Prompt Injection
Confidence: 60% confidence
Finding: Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
Content: Scanner excerpt · SKILL.md (reported line 1)May include surrounding context.
md
--- name: git-commit description: Execute git commit with conventional commit message analysis, intelligent staging, and message generation. Use when user asks to commit changes, create a git commit, or mentions /commit (trigger phrases - commit, git commit, 触发词 - 提交代码, 提交一下, 提交规范). Auto-detects type and scope from the diff, generates conventional commit messages, and stages files in logical groups. version: 1.0.0

Credential Access

High

Category: Privilege Escalation
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Content: Scanner excerpt · SKILL.md (reported line 93)May include surrounding context.
git add -p

text
**Never commit secrets** (.env, credentials.json, private keys). ### 3. Generate Commit Message

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger phrases include very broad terms like 'commit' and multilingual equivalents that are likely to appear in normal conversation, which can cause the skill to activate unexpectedly. Because this skill can stage files and create commits, accidental invocation could lead to unintended repository changes or inclusion of files the user did not mean to commit.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description says the skill performs 'intelligent staging' and stages files in logical groups, but it does not prominently warn users that files may be staged automatically before commit. This creates a consent and transparency problem: users may believe the skill only writes a commit message, while it can also modify the index and potentially include unintended files.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.