commit-security-review

Community

Block secrets and unsafe commits before they land.

Authorzxc1a1a1
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill prevents accidental leakage of credentials, tokens, private keys, and unsafe networking information by enforcing deterministic commit-time and PR merge-time security checks.

Core Features & Use Cases

  • Commit message guardrails: Rejects forbidden terms (case-insensitive) in commit subject/body and trailers, ensuring messages remain audit-safe.
  • Sensitive data & credential leak scanning: Detects high- and medium-confidence secret patterns such as API keys, JWTs, passwords, PEM private keys, and common webhook formats.
  • High-risk file type enforcement: Blocks the addition of sensitive file types and credential artifacts like .env (non-example) and private key files.

Quick Start

Use the commit-security-review Skill to review a proposed commit and automatically determine whether it must be blocked due to forbidden message patterns, leaked secrets, or high-risk files.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: commit-security-review
Download link: https://github.com/zxc1a1a1/Multi_Agent-AgentHub/archive/main.zip#commit-security-review

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.