atomic-commits — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited atomic-commits (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
How should the selected change scope be split into minimal coherent commits without staging unrelated work, overwriting user choices, or hiding risky behavior?
Use this skill when the user asks to:
Do not use this skill for message-only work, branch synchronization, conflict resolution, recovery, versioning, release notes, or tags.
Route to:
conventional-commits for commit message generation or validation only.branch-workflow for branch creation, switching, sync, upstream, push, or remote refs.resolve-conflicts when the index has unmerged paths or conflict markers.undo-recover for reset, restore, abort, reflog, stash, broad unstage, or recovery work.version-bump, changelog-maintenance, release-notes, or tag-release for release workflows.Before action, inspect or establish:
git status --short --branch,Staged changes are the source of truth by default. Unstaged and untracked files are dirty-state evidence, not permission to stage them.
Default mode: staged-only.
When staged changes exist, commit plans, commit messages, and commits must use staged changes only.
Unstaged and untracked files are dirty-state evidence, not permission to stage them.
Whole-working-tree mode is allowed only when the user explicitly says one of:
Even in whole-working-tree mode:
git diff --cached --name-only before each commit.You MAY:
conventional-commits for message classification after the commit group is selected.You MUST:
You MUST NOT:
git add ., git add -A, git add --all, or broad directory staging commands for atomic commits,git reset, git restore --staged ., or broad unstaging commands to reshape user-staged work,| State | Evidence | Risk | Default Action | Confirmation | Verification |
|---|---|---|---|---|---|
| Clean tree | git status --short | R0 | Report nothing to commit | no | status clean |
| Staged changes only | cached diff | R2 | Propose or create atomic commits if requested | no if explicit | cached names before each commit |
| Staged changes plus unstaged/untracked files | status, cached diff, working diff | R2 | Use staged changes only; report excluded files | yes before staging excluded file | cached names exclude excluded files |
| No staged changes, unstaged changes exist | status, working diff | R1/R2 | Produce plan only; do not stage or commit | yes before exact staging | cached diff remains empty until confirmed |
| Untracked files exist | status untracked list | R2/R3 | Treat as excluded by default | yes, file-specific | cached names exclude untracked files |
| Pre-existing staged files mismatch intended boundary | cached names and user request | R2/R3 | Stop and ask for exact boundary | yes before unstaging/restaging | preserve staged work |
| Mixed unrelated selected changes | cached diff or confirmed scope | R2 | Propose separate commits | no | group file lists verified |
| Secret-like content selected | diff or file content | R5 | Stop and redact; do not commit | yes after remediation | secret not staged |
| Conflicted index | status unmerged paths | R3/R5 | Route to resolve-conflicts | yes for resolution | status after route |
| User asks to push commits | branch/upstream state | R4/R5 | Route to branch-workflow | yes + preflight | remote ref verification |
| User asks amend/squash/rewrite | log/reflog/remote state | R5 | Route to undo-recover or explicit rewrite flow | yes + rescue | reflog/rescue and log |
conventional-commits only for that group.Trigger:
Default: <!-- guardrail:staging.default-staged-boundary -->
Must:
git diff --name-only, git diff --cached --name-only, and untracked paths.git add -- exact-path or hunk staging only after file/hunk-specific confirmation.Must not: <!-- guardrail:staging.no-stage-all-by-intent -->
git add ., git add -A, or git add --all unless a skill-specific exception is explicitly confirmed and all paths are listed.Requires explicit confirmation:
Verification:
git diff --cached --name-only exactly matches the confirmed commit boundary before each commit.Allowed:
Forbidden without explicit routing or confirmation:
Before each commit:
git diff --cached --name-only.If unexpected staged files appear:
After each commit:
git log -1 --oneline or equivalent commit evidence,git status --short for remaining or excluded work,Final response should include:
## State
- Branch and staged/unstaged/untracked state.
## Action
- Commit groups proposed or commits created.
## Evidence
- Status, diffs, files, and conventions used.
## Verification
- Cached file checks, commits created, tests or limitations.
## Remaining Risk
- Excluded files, unverified behavior, or required human review.Stop when the repository state is dirty, conflicted, diverged, missing required evidence, or ambiguous in a way that could overwrite user work, invalidate the requested scope, or require a gated action.
Requires explicit confirmation for:
Load:
references/chunking-rules.md when grouping boundaries are ambiguous.references/commands.md when command choice is needed.references/examples.md when the user asks for examples.references/failure-modes.md when state is risky or ambiguous.references/verification.md when verification depth is unclear.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.