git commit tool

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is coherently focused on creating local Git commits, but it can stage files and create persistent commits, so users should review what will be committed.

Install only if you want an agent to help create Git commits. Check the diff, staged files, generated Chinese commit message, and AI-GEN footer before accepting the commit, especially in repositories that may contain secrets or files not meant to be committed.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could stage and commit files in the current repository, including unintended files if the user does not review the diff and status first.

Why it was flagged

The skill is allowed to use Bash and instructs the agent to stage files and create commits. This is purpose-aligned for a Git commit tool, but it can persist unintended changes if the staged set or generated message is wrong.

Skill content
allowed-tools: Bash ... git add path/to/file1 path/to/file2 ... git commit -m "<type>[scope]: <description>"
Recommendation

Before using it, review `git status` and the diff, confirm the intended files are staged, and avoid committing secrets or sensitive local files.