git-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited git-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Covers the full git workflow for a software project: branch naming conventions, commit message authoring (Conventional Commits standard), PR description templates, and merge strategy advice. It produces ready-to-use git artefacts, not generic advice.
Format: <type>(<scope>): <description>
| Type | When to use |
|---|---|
feat | A new feature visible to users or consumers |
fix | A bug fix |
docs | Documentation only |
style | Formatting, whitespace — no logic change |
refactor | Code restructure with no behaviour change |
perf | Performance improvement |
test | Adding or fixing tests |
chore | Build, tooling, dependency updates |
ci | CI/CD pipeline changes |
revert | Reverts a previous commit |
Rules:
fix: handle null session token not Fixed the null session token issue.feat(auth): add OAuth2 login! after type/scope and add BREAKING CHANGE: footer: feat(api)!: remove v1 endpointPattern: <type>/<short-description> using the same type vocabulary as Conventional Commits.
Examples: feat/guest-checkout, fix/null-session-token, chore/upgrade-dependencies, docs/api-reference
Rules:
feat/PROJ-123-guest-checkout.| Strategy | When to use |
|---|---|
| Merge commit | Preserves full branch history; good for long-lived feature branches |
| Squash and merge | Clean linear history; good for small features or fix PRs |
| Rebase and merge | Linear history without squashing; good when individual commits are meaningful |
<type>(<scope>): <imperative description>.Closes #123), or co-authors.<type>(<scope>): <description>
[optional body — explain why, not what]
[optional footer — BREAKING CHANGE, Closes #NNN, Co-authored-by]## What
[One sentence: what this PR does.]
## Why
[Why this change is needed — link to issue or ticket if applicable.]
## Changes
- [Key change 1]
- [Key change 2]
## Test plan
- [ ] [What was tested and how]
- [ ] [Edge case verified]
## Notes
- [Follow-up work, known limitations, or deployment considerations]<type>/<short-description>Input: "I added a price filter to the search results page. It filters by min and max price and preserves the filter when navigating back."
Expected output:
feat(search): add price range filter to results page
Preserves min/max values on browser back navigation so users
do not lose their filter context between page visits.Input: "Fixed a bug where the session token was not cleared on logout, leaving users authenticated after clicking sign out."
Expected output:
## What
Fix session token not cleared on logout.
## Why
Users remained authenticated after signing out because the token cookie
was not explicitly expired. Closes #412.
## Changes
- Expire session cookie with `Max-Age=0` on logout handler
- Add integration test for post-logout authenticated request
## Test plan
- [ ] Log in, click sign out, attempt to access protected route — expect 401
- [ ] Verify cookie is absent in browser DevTools after logoutgit log and by tools (changelogs, release notes, semantic versioning). Write for both audiences.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.