git-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited git-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guided workflows for common git operations that benefit from structured steps.
When preparing a pull request:
git log main..HEAD --oneline — list all commits on the branchgit diff main...HEAD --stat — see all changed filesgit status — check for uncommitted work git push -u origin HEAD
gh pr create --title "..." --body "$(cat <<'EOF'
## Summary
- ...
## Test plan
- [ ] ...
🤖 Generated with [Claude Code](https://claude.com/claude-code)
EOF
)"gh pr view --web to open in browserClean up merged branches safely:
git checkout main && git pull git branch --merged main | grep -vE '^\*|main|master|develop' git branch --merged main | grep -vE '^\*|main|master|develop' | xargs -r git branch -d git fetch --prune git branch -r --merged origin/main | grep -vE 'main|master|develop|HEAD'When a PR has conflicts:
git fetch origin
git merge origin/main --no-commit --no-ff
git diff --name-only --diff-filter=U # List conflicted files git rebase origin/main
# Resolve conflicts per commit, then:
git rebase --continuegit rebase --abort or git merge --abortgit show origin/branch:path/to/file > /tmp/extracted.txtIn monorepos, scope tags to the package:
# ❌ Ambiguous in monorepos
git tag v2.1.0
# ✅ Scoped to package
git tag contextbricks-v2.1.0
git push origin contextbricks-v2.1.0Pattern: {package-name}-v{semver}
When creating a new repo, always create .gitignore BEFORE the first git add:
cat > .gitignore << 'EOF'
node_modules/
.wrangler/
dist/
.dev.vars
*.log
.DS_Store
.env
.env.local
EOF
git init && git add . && git commit -m "Initial commit"If node_modules is already tracked:
git rm -r --cached node_modules/
git commit -m "Remove node_modules from tracking"Before publishing or sharing a private repo:
gh repo view --json visibility -q '.visibility'If PRIVATE, ensure:
LICENSE contains proprietary notice (not MIT/Apache)package.json has "license": "UNLICENSED" and "private": trueCONTRIBUTING.md or "contributions welcome" in README~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.