pre-commit-check — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pre-commit-check (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
git status — list staged and unstaged files.git diff --cached — full staged diff.git log --oneline -5 — recent commit messages to infer style.git diff --cached --shortstat — line and file counts for size check.| Issue | Action |
|---|---|
.env, *.key, credentials.*, *secret* staged | Stop. Warn user. Do not commit. |
| Secrets or tokens in changed lines | Stop. Warn user. |
| Changes to files unrelated to the stated task | Flag — do not auto-unstage |
Debug code (console.log, print(, debugger, breakpoint()) | Flag |
| Nothing staged | Do not create an empty commit. Tell the user. |
| >400 lines changed or >10 files touched | Flag as oversized — suggest splitting by concern |
| Multiple unrelated concerns in one diff | Flag — name each concern and suggest separate commits |
<type>: <subject> ← max 72 chars, imperative present tense
[optional body] ← wrap at 72 chars, explains WHY not WHAT
[optional footer] ← e.g. Closes #123, Co-authored-by: ...| Type | When to use |
|---|---|
feat | New user-visible feature |
fix | Bug fix |
refactor | Code restructure, no behaviour change |
test | Adding or updating tests |
docs | Documentation only |
chore | Tooling, config, dependencies |
perf | Performance improvement |
Closes #42, Refs #17git-safety rule)git commit -m "$(cat <<'EOF'
feat: add user authentication
Replaces the previous session-token approach with JWT.
Closes #42
EOF
)"Run git status to confirm success before reporting done.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.