Git Hooks Generator

生成 Git hooks 脚本，自动格式化代码、检查 lint、运行测试等。

Security Scan

Not malicious, but the skill's documentation and advertised features don't match the actual code: it claims multiple hook types and a CLI, but only writes a single pre-commit hook that runs npm commands.

Purpose & Capability

The SKILL.md and description claim multiple hooks (pre-commit, commit-msg, pre-push) and a CLI interface (git-hooks-generator init / add), but the included git-hooks-generator.sh only creates a .git/hooks/pre-commit that runs 'npm run lint' and 'npm test'. The skill declares no required binaries, yet the script uses npm — an undeclared dependency and minor incoherence.

Instruction Scope

Instructions advertise interactive CLI usage and broader functionality, but runtime behavior is limited to creating a single pre-commit hook and making it executable. The hook runs npm scripts, which will execute whatever commands are defined in the repository's package.json (this is expected for a JS-based project but should be documented). The SKILL.md gives agent-level commands that are not provided by the bundle (no installed CLI wrapper).

Install Mechanism

No install spec; this is an instruction-only skill with a small included shell script. Nothing is downloaded or installed from external sources.

Credentials

The skill requests no environment variables or credentials (appropriate), but the hook it writes depends on 'npm' being available and on project-specific package.json scripts. The lack of a declared npm requirement is a minor mismatch but not a credential risk.

Persistence & Privilege

The skill does not request persistent platform privileges (always:false). It writes a file into the repository's .git/hooks directory (expected for a hooks generator) and does not modify other skills or system-wide configuration.

What to consider before installing

This skill does not appear malicious, but it is inconsistent and incomplete. Before installing or running it: 1) Inspect git-hooks-generator.sh — it writes a .git/hooks/pre-commit that runs 'npm run lint' and 'npm test'. 2) Ensure you're in a git repository and back up any existing hooks (.git/hooks) so you don't overwrite them unintentionally. 3) Verify npm is available and review your repository's package.json scripts; those scripts will run with whatever commands they contain and could be destructive if they were malicious. 4) Note that the SKILL.md promises other hooks and a CLI ('git-hooks-generator add ...') but those are not implemented; ask the author for clarification or updated code. 5) If you want to proceed, test this in a safe or disposable repo first. If you need the additional advertised features (commit-msg, pre-push, multi-language), request an updated implementation that matches the documentation.

自动生成 Git hooks，提升开发效率。

功能

• ✅ pre-commit 格式化
• ✅ commit-msg 规范检查
• ✅ pre-push 测试检查
• ✅ 多种语言支持

使用方法

git-hooks-generator init
git-hooks-generator add --hook pre-commit --type lint