An automated git safety auditing agent that flags risk signals, maps impact domains, and outputs a structured risk score from git blame logs.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install git-blame
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install git-blame using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Git Blame Auditor?
Git Blame Auditor is an advanced git-native security agent designed to analyze the safety, risk posture, and author patterns behind any line of code. Unlike traditional history archaeology tools that focus solely on author attribution or historical intent, this tool acts as an automated security auditor directly in your workflow. By evaluating commit metadata through a strict security lens, it actively helps developers identify problematic modifications, unreviewed merges, and outlier author behaviors before they reach production.
Integrating this skill into your suite of Openclaw Skills empowers teams to instantly analyze lines of code for hidden risk. Whether you are performing an emergency on-call triage or conducting a routine security review, Git Blame Auditor automatically checks for high-risk signals like out-of-hours commits, excessive file dispersion, and missing PR associations, giving your AI agent the exact context needed to safeguard your codebase.
Git Blame Auditor Use Cases
- Conducting rapid security audits on suspicious code lines during incident triage.
- Assessing the safety of a change before merging high-impact pull requests.
- Identifying out-of-area commits made by contributors who don't typically touch delicate database or billing systems.
- Scanning recent repositories to flag commits made outside standard working hours without peer reviews.
- Quantifying technical debt and architectural drift by tracing the upstream impact of legacy configurations.
How Git Blame Auditor Works
- Query and Parse Git Blame: The skill executes
git blamewith the--porcelainflag on targeted files or lines to capture deep commit metadata, author details, and precise timestamps. - Evaluate Commit Attributes: It reviews the size, footprint, and metadata of the associated commit using commands like
git show --statto measure file scatter and churn metrics. - Perform Author Fingerprinting: It runs local behavioral analysis on the author's history (such as file affinity, recent velocity, and commit timezone distributions) to detect out-of-character or localized anomalies.
- Map Impact Domains: It maps code dependencies and tracks upstream dependencies using
git grepto identify how changes influence payment pipelines, API structures, or database schemas. - Calculate Composite Risk Score: It combines all security triggers (e.g., overtime work, undocumented reviews, major changes) into a single 0-100 score classified under Low, Medium, High, or Critical risk.
- Generate a Structured Verdict: The agent presents an actionable report detailing risk factors, impact scopes, author behavior summaries, and prioritized validation recommendations.
Git Blame Auditor Setup
To leverage this capability within your local environment alongside your other Openclaw Skills, ensure you have a standard git installation accessible via your command line interface. No external API keys are required as the entire analytical workflow operates locally.
You can trigger an audit immediately using your agent interface:
# Audit a specific line inside a file
/git-blame-audit src/payment/gateway.ts:142
# Audit a range of lines
/git-blame-audit src/payment/gateway.ts:140-155
# Evaluate recent commits from a specific author
/git-blame-audit --author "[email protected]" --since 2026-01-01
Git Blame Auditor Data Schema & Taxonomy
The Git Blame Auditor relies on structured parsing of raw git history and compiles its findings into a highly structured taxonomy.
| Metadata Category | Collected Field | Audit Purpose |
|---|---|---|
| Blame Metrics | author-time, author-tz |
Detects midnight patterns and timezone anomalies |
| Commit Churn | files changed, insertions, deletions |
Detects highly scattered ("mega-commits") or high-churn modifications |
| Review Coverage | PR references, merge parents |
Evaluates if the change went through formal QA pipelines |
| Author Profile | commit history, file affinity |
Evaluates author expertise in the affected module |
| Impact Map | referenced symbols, callers |
Maps dependency chains and high-risk domains like Auth or Payment |
Git Blame Auditor Advanced Features
- Local-First & Offline-Ready: Runs zero external calls, keeping all source code and proprietary git metadata securely within your local environment.
- Customizable Risk Weighting: Allows team leads to reconfigure penalty points for overtime work, review thresholds, or file-scatter counts depending on internal policies.
- Context-Aware Domain Mapping: Identifies delicate folders (e.g., billing, credentials, database migrations) and automatically escalates their baseline risk values.
- Behavioral Author Profiling: Tracks whether a commit represents an out-of-area change by comparing the author's target file list against their historical file affinity footprint.
SKILL.md
Loading
Related Openclaw Skills
Session Archiver Pro
A powerful utility to extract, structure, and link decisions, action items, and knowledge from raw AI chat sessions into Markdown, JSON, or Obsidian.
Skill Auditor
A deep auditing and optimization CLI utility for local Openclaw Skills environments, providing comprehensive usage analysis, permission reviews, and automated cleanup scripts.
Route Weaver
An intelligent travel agent that generates optimized day-by-day itineraries, custom budgets, transport routing, and contingency plans based on user preferences.
Nutri Calc
An AI-powered nutrition analysis tool equipped with a 2,000+ entry Chinese food database, designed to parse natural language meal descriptions and track goal-oriented macro targets.
Anki Fusion
Anki Fusion is an AI-powered skill that automatically transforms PDFs, articles, and text notes into cognitive-optimized Anki flashcards using Bloom's taxonomy.
Becoming Steve Jobs
An executable AI agent toolkit based on Brent Schlender and Rick Tetzeli's definitive biography tracking how Steve Jobs evolved from a reckless young founder into history's greatest business leader.
Featured*
