Is committing-code safe to install?

SaferSkills independently audited committing-code (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/committing-code/SKILL.md · 1 file

skills/committing-code/SKILL.md3.7 KB · Markdown

name: committing-code

description: Writes git commit messages using conventional commits format with gitmoji. Use when creating git commits, preparing commit messages, or when the user asks to commit changes. Triggers on "commit", "git commit", "save changes", or any request to record changes to version control.

Committing Code

Overview

Every commit message uses conventional commits with gitmoji. The format is consistent, scannable, and conveys intent at a glance.

Format

<emoji> <type>: <short description>

<body — what changed and why>

Co-Authored-By: Claude <agent> <[email protected]>

The short description is imperative mood, lowercase, no period. The body uses bullet points for multiple changes.

Gitmoji Reference

Emoji	Type	When to use
🎉	`feat`	Initial commit / first commit in a repo
✨	`feat`	New feature or capability
🐛	`fix`	Bug fix
♻️	`refactor`	Code restructuring without behavior change
📝	`docs`	Documentation only
🔧	`chore`	Config, tooling, non-code changes
✅	`test`	Adding or updating tests
🚀	`perf`	Performance improvement
🔥	`chore`	Removing code or files
🏗️	`refactor`	Architectural change
💄	`style`	UI/cosmetic change
🔒	`security`	Security fix
⬆️	`chore`	Dependency upgrade
🚚	`refactor`	Moving or renaming files

Examples

Good:

✨ feat: add user authentication with JWT

- Add login/logout endpoints in auth.controller.ts
- Add JWT middleware for protected routes
- Add refresh token rotation
- Add auth integration tests

Co-Authored-By: Claude Opus 4.5 <[email protected]>

🐛 fix: prevent race condition in websocket reconnect

The reconnect logic was firing multiple times when the connection
dropped during a message send, causing duplicate subscriptions.
Added a mutex guard around the reconnect path.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

♻️ refactor: rename getUserById to fetchUser across codebase

Aligns with the fetch* naming convention for async data access.
Updated all call sites, tests, and type definitions.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

Bad:

updated stuff          # No type, no emoji, vague
feat: Add Feature      # No emoji, capitalized
✨ feat: add feature.  # Trailing period
🐛✨ fix/feat: stuff   # Multiple types

Rules

One type per commit. If changes span multiple types, split into multiple commits.
Body explains WHY, not just WHAT. The diff shows what changed — the message explains the reasoning.
Use bullet points in the body when listing multiple changes.
Always include Co-Authored-By when the commit was AI-assisted.
Use HEREDOC for multi-line messages to preserve formatting:

   git commit -m "$(cat <<'EOF'
   ✨ feat: add new feature

   Body text here.

   Co-Authored-By: Claude Opus 4.5 <[email protected]>
   EOF
   )"

Commit Frequency

Commit early and often:

After each logical unit of work (one feature, one fix, one refactor)
After adding a new file or skill
After updating documentation alongside code changes
Never batch unrelated changes into a single commit

Pre-Commit Checklist

Before committing, verify:

README.md is updated if the change affects user-facing documentation (new features, skills, APIs, installation steps)
AGENTS.md is updated if the change affects project structure, conventions, or available skills
Documentation changes are part of the same commit as the code they describe — not a separate "docs" commit after the fact

committing-code— agent skill

Is committing-code safe to install?

Committing Code

Overview

Format

Gitmoji Reference

Examples

Rules

Commit Frequency

Pre-Commit Checklist

Audit the pieces. Scan the whole. Decide.