Skip to main content

validate-git-hygiene

Validates git commit messages, branch naming conventions, and checks for sensitive files to ensure secure git workflows.

Install this skill

or
24/100

Security score

The validate-git-hygiene skill was audited on Feb 28, 2026 and we found 14 security issues across 2 threat categories, including 1 critical. Review the findings below before installing.

Categories Tested

Security Issues

medium line 30

Template literal with variable interpolation in command context

SourceSKILL.md
30```bash
medium line 73

Template literal with variable interpolation in command context

SourceSKILL.md
73```bash
medium line 117

Template literal with variable interpolation in command context

SourceSKILL.md
117```bash
medium line 197

Template literal with variable interpolation in command context

SourceSKILL.md
197```json
high line 130

Access to SSH directory

SourceSKILL.md
130"\.ssh/"
critical line 360

Access to SSH directory

SourceSKILL.md
360- `id_rsa`, `.ssh/` files
medium line 3

Access to .env file

SourceSKILL.md
3description: Validate git commit messages, branch naming conventions, and check for sensitive files. Returns structured output with commit format validation, branch name compliance, and sensitive file
low line 123

Access to .env file

SourceSKILL.md
123"\.env$"
low line 124

Access to .env file

SourceSKILL.md
124"\.env\..+"
low line 301

Access to .env file

SourceSKILL.md
301".env.production",
medium line 357

Access to .env file

SourceSKILL.md
357- `.env`, `.env.local`, `.env.production`
low line 405

Access to .env file

SourceSKILL.md
405git rm --cached .env
low line 408

Access to .env file

SourceSKILL.md
408echo ".env*" >> .gitignore
low line 410

Access to .env file

SourceSKILL.md
410git commit -m "chore: add .env to .gitignore"
Scanned on Feb 28, 2026
View Security Dashboard
Installation guide →
GitHub Stars 22
Rate this skill
Categorydevelopment
UpdatedMay 21, 2026
mattnigh/skills_collection