git-commit-formatter — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited git-commit-formatter (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Format all commit messages using this specification.
Note: This skill uses simplified types (fea,fix,ref,ai,oth) rather than full Conventional Commits (feat,fix,refactor,chore,docs, etc.) for brevity in AI-generated messages.
<type>(optional scope): <description>All lowercase except proper nouns. No period at the end.
| Type | Use when |
|---|---|
fea | Adding a new feature |
fix | Fixing a bug |
ref | Refactoring or restructuring code |
ai | AI-related changes (prompts, models, agents) |
test | Adding or correcting tests |
oth | Documentation, config, or anything else |
BREAKING CHANGE: <description>fea: add user authentication flow
fix(api): handle null response from downstream service
ref: extract validation logic into shared helper
ai: update system prompt for code review skill
oth: update README with setup instructionsfea(api)!: remove legacy authentication endpoint
BREAKING CHANGE: /api/v1/auth endpoint removed. Use /api/v2/auth instead.User: "Commit my changes"
Agent:
git diff --cached — sees staged changesfea(auth): add JWT token refresh flowfea(auth): add JWT token refresh flow?"git commit -m "fea(auth): add JWT token refresh flow"git status)git diff --cached to see staged changesgit commit -m "<message>"If git diff --cached is empty, check git diff for unstaged changes. Ask the user if they want to:
git add -Agit add <files>git diffIf git status shows "not a git repo", initialize with git init or alert the user.
If git commit fails (e.g., pre-commit hook rejection), surface the error and ask if the user wants to:
git commit --no-verify~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.