Security audit
Git Commit Workflow
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrowly scoped git commit helper that tells an agent to inspect, stage, and commit repository changes with sensible guardrails.
Install only if you want an agent to make commits for you in the active repository. Before use, make sure the agent is running in the intended repo and review the diff, staged files, and commit message when possible, especially in repositories that may contain secrets or unrelated local changes.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.