Skill community development
Risk level
medium
40/100

Caveman Commit ↗

Caveman Commit is a community-maintained skill from juliusbrussee. Anomity scores its risk at 40 out of 100 (medium).

filesystem:read git:access

Analysis summary

Caveman Commit is a community-maintained skill from juliusbrussee. Anomity scores its risk at 40 out of 100 (medium).

Generates compressed commit messages in Conventional Commits format from the staged diff, aiming for a parseable subject line without the paragraph of narration agents tend to produce.

It reads the repository and works through git, so it declares filesystem read and git access. Machine-readable commit messages are genuinely useful downstream for changelogs and release automation. The caution is that a message generated from a diff describes what changed, not why — and the why is the part a future reader actually needs.

Why this entry scored 40 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is community-maintained, trust adjusts the score by -10. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 40, placing it in the medium band.

See the full scoring formula →

Findings

  • Established community project Trust offset
    Contribution to score: -10

Capabilities

Every capability the entry declares, with the security implication of each.

  • filesystem:read Filesystem read
    Can read files on the host system. Used for context, indexing, or analysis.
  • git:access Git access
    Reads or writes through git. Allows changes to commit history, branches, and remotes.