conventional-commit-pr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited conventional-commit-pr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Reads a diff and produces (a) one or more Conventional Commit messages — correct type(scope): subject line, a body explaining the why, and a BREAKING CHANGE: footer when relevant — and (b) a clean pull-request description (Summary, Changes, Test plan checklist, linked issues). Well-formed Conventional Commits also drive automated semver bumps and changelogs.
git status, git diff (unstaged) andgit diff --staged (staged). For a PR, also review the whole branch: git log <base>..HEAD and git diff <base>...HEAD.
references/cheatsheet.md): feat · fix · docs · refactor · test · chore · perf · build · ci. If the diff mixes concerns, recommend splitting into separate commits — one type per commit.
auth, api, orders).≤ 72 chars (≤ 50 preferred). "add", "fix", "remove" — not "added"/"fixes".
any context a reviewer needs — not a restatement of the diff.
BREAKING CHANGE: <description> for anyincompatible change (or ! after the type/scope), and issue refs like Refs: #123 / Closes #123.
Summary (why), Changes (bullets), Test plan (checklist), and linked issues.
run git commit / open the PR if the user explicitly asks.
repo-specific commit/scope conventions (check the recent git log style).
git log for scope namingand conventions before drafting.
unrelated concerns.
! (e.g. feat(api)!: …) or aBREAKING CHANGE: footer — prefer including the footer so tooling catches it.
unless the user explicitly requests it. Never bypass hooks or signing.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.