smart-commit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited smart-commit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Cluster uncommitted changes into logical groups and commit each with a clear conventional commit message.
git status and git diff to inspect all uncommitted changesgit diff --cached. If anything is alreadystaged, don't fold it into clusters silently — commit it as its own commit (it was likely staged deliberately) or ask the user what to do with it
it to the most related cluster and mention the extra change in the commit body (interactive git add -p is not available)
git add <files>git commit -m "<message>"CHANGELOG.md unreleased section (see below), then commit: docs: update changelogUse conventional commits: <type>(<scope>): <description>
Types: feat, fix, docs, style, refactor, test, chore, perf, ci, build
Examples:
feat(auth): add password reset flowfix(api): handle null response from users endpointrefactor(utils): extract date formatting helpersdocs: update README installation stepsAfter all commits are made, update the ## [Unreleased] section of CHANGELOG.md:
git log to see them)### Added — new features or capabilities### Changed — changes to existing functionality### Fixed — bug fixes### Improved — enhancements to existing features### Removed — removed features#### Internal heading with <!-- internal -->: ### Added
- **Feature name**: User-facing description
#### Internal
<!-- internal -->
- Implementation detail that users don't need to seegit add CHANGELOG.md && git commit -m "docs: update changelog"If CHANGELOG.md doesn't exist or has no ## [Unreleased] section, skip this step.
If this session involved tricky bugs, new integrations, or non-obvious patterns, suggest running /reflect to capture lessons learned.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.