360 Secure SkillHub
360 安全技能中心

git-commit-message-helper

该 Skill 根据用户提供的已暂存改动或 diff 统计,生成简短 conventional-commit 主题及可选正文,提供主选和两条备选;可按用户许可运行只读 git 命令,不提交、不推送、无网络。

hmahmadcs
hmahmadcs
热度 28.17
最近更新 2026-10-17 19:56:52
分类:开发依赖:内部调用大模型 / 代码执行应用场景:工作流 / 摘要总结 / 模板

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add hmahmadcs/git-commit-message-helper
Metadata
name
git-commit-message-helper
description
Suggest conventional-commit messages from a staged diff summary. Use when the user asks for a commit message after staging changes.
metadata
{"clawdbot":{"emoji":"💬","requires":{"bins":["git"]}}}

Git Commit Message Helper

Purpose / Overview

Produces a short conventional-commit subject (+ optional body) from changes.

When to Use

  • User says "write a commit message"
  • After git add.

Usage / Instructions

  1. Prefer user-provided diff/stat; if missing, ask them to paste it or run git diff --cached --stat
  2. Choose type: feat|fix|docs|refactor|test|chore.
  3. Subject ≤ 72 chars, imperative mood, no trailing period.
  4. Offer one primary message and two short alternatives.

Examples

Input stat: "auth/login.ts | 12 +++++" Output: fix(auth): handle empty password field

Requirements / Dependencies

git (optional; only if the user wants you to run git diff --cached --stat).

Limitations / Caveats

Does not commit or push.

Security / Permissions

May run read-only git commands the user approves. No network.

Description

Suggest conventional-commit messages from a staged diff summary.

License or terms

MIT-0

Use case

Who: anyone performing the workflow summarized as “Suggest conventional-commit messages from a staged diff summary”. Purpose: complete that workflow with guided steps from the git-commit-message-helper skill.

Risks and mitigations

References

Ethical considerations

Illegal use of this skill is not allowed. The publisher will not be accountable for outcomes arising from unlawful use under country or international law. Prohibited examples include breaking into accounts without authorization, deploying ransomware, and trafficking in stolen personal data. Misuse against third-party systems without authorization is illegal.