conventional-commit-message — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited conventional-commit-message (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
git add -A.git diff --cached --stat andgit diff --cached.
git add -A, report that there are no changesto commit.
full message.
./scripts/validate_commit_header.py. Resolve this path relative to the skill directory that contains this SKILL.md; it is owned by this skill, not by the repository being committed.
asks for them.
<type>(<optional scope>)<optional !>: <description>
<optional body>
<optional footer>The command form is:
git commit -m"<header>" -m"<optional body>" -m"<optional footer>"type is mandatory.description is mandatory.scope is optional and project-defined.change, not changed or changes.! before : when the commit introduces a breaking change.Allowed types:
feat: API or UI feature added, adjusted, or removed.fix: API or UI bug fixed.refactor: code rewritten or restructured without API or UI behavior change.perf: performance-focused refactor.style: code style only, with no behavior change.test: missing tests added or existing tests corrected.docs: documentation-only changes.build: build tools, dependencies, project version, or packaging.ops: infrastructure, deployment, CI/CD, backups, monitoring, or recovery.chore: maintenance tasks such as init commits or .gitignore updates.Special cases:
chore: initMerge branch '<branch name>'Revert "<reverted commit subject line>"Run the skill-owned validator from the skill directory, or pass the equivalent skill-relative path to Python from another working directory:
./scripts/validate_commit_header.py "<header>"Use this helper for deterministic header validation before creating a commit or when validating, rewriting, or explaining a message. If the helper cannot be executed in the current environment, fall back to manually checking the rules in this skill and report that fallback in the result.
The body is optional. Include it when the header alone does not explain the motivation or when previous behavior matters.
The footer is optional except for breaking changes.
Closes #123 or Fixes JIRA-456.BREAKING CHANGE:.BREAKING CHANGE:.
When a commit has a breaking change, prefer both:
feat(api)!: remove status endpoint
BREAKING CHANGE: status endpoint is no longer available.-m arguments for multi-paragraph messages:git commit -m"<header>" -m"<optional body>" -m"<optional footer>"validation.
type(scope), keep that prefix and derivethe description, body, and footer from the staged diff.
violations and do not commit until the message is corrected or a valid replacement is derived.
message.
type or scope choices only when not committing automatically.
them or the repository context makes them clear.
For detailed examples and versioning notes, read references/convention.md only when the task needs extra guidance.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.