commit-security-scan Eval report.

Task wording matches this skill metadata.

• Evaluate commit-security-scan before installing it in an agent workflow
• security
• Coding agents workflows; Claude Code teams; teams that value GitHub adoption signals

Install handoff is available.

• npx skills add codexstar69/bug-hunter --skill commit-security-scan

standard package or runtime install path

• npx skills add codexstar69/bug-hunter --skill commit-security-scan

Good trust signals with a few areas worth checking before rollout.

• Strong shortlist
• 502 GitHub stars
• MIT

Needs review

• Permission surface may require sandboxing

This skill should not be selected by an agent without explicit human security review.

• Do not auto-install. Inspect the source, dependencies, and permission surface first.
• Metadata combines secrets access with shell or command execution

MIT

• MIT

secrets or environment access, shell or command execution

• Shell or command execution: high
• Network access: medium
• Filesystem access: medium