panda-git-commit

智能生成符合 Conventional Commits 规范的 Git Commit Message。 自动检测 monorepo scope，支持将变更按功能拆分为多个 commit。 触发词："commit"、"提交"、"生成 commit message"、"拆分提交"、 "split commits"、"...

This skill appears to do what it claims: analyze git diffs/history and generate Conventional Commit messages, plus optionally cache project settings to EXTEND.md in the repo or user config. Before installing or running it: - Review the scripts (they are included) if you want to confirm behavior; they only use git, filesystem, and local exec calls (no network exfiltration). - Be aware that --init or --refresh will create/overwrite .panda-skills/panda-git-commit/EXTEND.md in your repository or write a file under your XDG config or $HOME. Back up any existing EXTEND.md you care about. - The skill requires a JS/TS runtime (bun preferred, fallback via npx -y bun) and will invoke git commands; ensure those tools are available and run it in a repo you trust. - If you only want to inspect results, use --dry-run and/or --with-diff and avoid automatic committing. If you want higher assurance, run the tool in a sandboxed clone of your repo first and inspect the generated EXTEND.md and console output.

Type: OpenClaw Skill Name: panda-git-commit Version: 1.0.2 The panda-git-commit skill bundle is a legitimate tool designed to automate the generation of Git commit messages following the Conventional Commits standard. It includes scripts for analyzing git diffs (analyzer.ts), detecting project-specific commit conventions (convention-detector.ts), and identifying monorepo structures (scope-detector.ts). The code uses safe execution practices (execFile) for git commands and limits its file system operations to project directories and standard configuration paths (~/.config). No evidence of data exfiltration, malicious execution, or prompt injection was found.