commit-messages

80 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By athola/claude-night-market (GitHub) · coding · 350 stars · scanned at commit 4f94139

Generates conventional commit messages from staged changes. Use when committing and needing a well-formatted message. For full PR prep, use pr-prep.

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 4 places.

plugins/sanctum/agents/dependency-updater.md, line 205Install with: cargo install cargo-outdated
plugins/sanctum/commands/update-dependencies.md, line 94- **Rust**: `cargo-outdated` (`cargo install cargo-outdated`)
plugins/sanctum/commands/update-tutorial.md, line 135- Install: `brew install vhs` or `go install github.com/charmbracelet/vhs@latest`

Show 1 more

plugins/sanctum/commands/update-tutorial.md, line 180npx playwright test assets/browser/mcp-browser.spec.ts

Runs commands on your computer

The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.

Found in 42 places.

plugins/sanctum/hooks/PERFORMANCE.md, line 18- **Spawns itself in background** using `subprocess.Popen` with `start_new_session=True`
plugins/sanctum/hooks/PERFORMANCE.md, line 31subprocess.Popen([sys.executable, __file__, "--background"], ...)
plugins/sanctum/hooks/PERFORMANCE.md, line 122result = subprocess.run([sys.executable, hook], capture_output=True, timeout=2, stdin=subprocess.DEVNULL)

Show 17 more

plugins/sanctum/hooks/deferred_item_sweep.py, line 53result = subprocess.run(
plugins/sanctum/hooks/deferred_item_sweep.py, line 86except (subprocess.TimeoutExpired, json.JSONDecodeError, OSError) as exc:
plugins/sanctum/hooks/hooks.json, line 9"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/deferred_item_watcher.py\"",
plugins/sanctum/hooks/hooks.json, line 19"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/task_created_tracker.py\"",
plugins/sanctum/hooks/hooks.json, line 31"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/security_pattern_check.py\"",
plugins/sanctum/hooks/hooks.json, line 36"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/config_change_audit.py\"",
plugins/sanctum/hooks/hooks.json, line 47"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/post_implementation_policy.py\"",
plugins/sanctum/hooks/hooks.json, line 52"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/brainstorm_session_warn.py\"",
plugins/sanctum/hooks/hooks.json, line 63"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/session_complete_notify.py\" --clear-state",
plugins/sanctum/hooks/hooks.json, line 74"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/verify_workflow_complete.py\"",
plugins/sanctum/hooks/hooks.json, line 79"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/session_complete_notify.py\"",
plugins/sanctum/hooks/hooks.json, line 84"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/deferred_item_sweep.py\"",
plugins/sanctum/hooks/hooks.json, line 95"command": "\"${CLAUDE_PLUGIN_ROOT}/hooks/config_change_audit.py\"",
plugins/sanctum/hooks/post_implementation_policy.py, line 148result = subprocess.run( # nosec B603 B607
plugins/sanctum/hooks/post_implementation_policy.py, line 155except (OSError, subprocess.SubprocessError):
plugins/sanctum/hooks/security_pattern_check.py, line 57"reminder": "Security Warning: os.system() can lead to command injection. "
plugins/sanctum/hooks/security_pattern_check.py, line 58"Use subprocess.run() with a list of arguments instead.",

and 22 more places

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'commit-messages' ] || [ -L ~/.agents/skills/'commit-messages' ]; then echo 'A skill folder named commit-messages already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/athola/claude-night-market' "$d" && git -C "$d" checkout --quiet '4f94139a2d325f14442a62dc0b4cd28b41dbb5ba' -- 'plugins/sanctum/skills/commit-messages' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/sanctum/skills/commit-messages' ~/.agents/skills/'commit-messages' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'commit-messages' ~/.claude/skills/'commit-messages' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for athola/claude-night-market shows the score of its lowest-scoring skill.

SkillTrust badge for athola/claude-night-market

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/athola/claude-night-market.svg)](https://zalavijaysinh.github.io/skilltrust/repos/athola/claude-night-market/)

Score history

Date	Version	Score
2026-11-07	`4f94139`	100