hooks — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hooks (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- SPDX-License-Identifier: CC-BY-SA-4.0 --> <!-- SPDX-FileCopyrightText: Netresearch DTT GmbH -->
Expert patterns for Git version control workflows including branching strategies, commit conventions, collaborative workflows, and CI/CD integration.
This is an Agent Skill following the open standard originally developed by Anthropic and released for cross-platform use.
Supported Platforms:
Skills are portable packages of procedural knowledge that work across any AI agent supporting the Agent Skills specification.
Add the Netresearch marketplace once, then browse and install skills:
# Claude Code
/plugin marketplace add netresearch/claude-code-marketplace
/plugin install git-workflow@netresearch-claude-code-marketplaceSince Claude Code 2.1.157 a plugin directory under your personal skills directory loads on its own, including the hooks and commands this repo ships:
mkdir -p ~/.claude/skills
git clone https://github.com/netresearch/git-workflow-skill.git \
~/.claude/skills/git-workflowIt loads as git-workflow@skills-dir on the next session. Update with git -C ~/.claude/skills/git-workflow pull and start a new session; remove it by deleting the directory. This route has no claude plugin update.
Install with any Agent Skills-compatible agent:
npx skills add https://github.com/netresearch/git-workflow-skill --skill git-workflowLimitation:npx skillsinstallsSKILL.md-based skills only. This repo also shipshooks,commands, which it does not install — use the marketplace or the skills directory for those.
Download the latest release and extract to your agent's skills directory.
git clone https://github.com/netresearch/git-workflow-skill.gitcomposer require netresearch/git-workflow-skillRequires netresearch/composer-agent-skill-plugin.
npm install --save-dev \
@netresearch/agent-skill-coordinator \
github:netresearch/git-workflow-skillRequires @netresearch/agent-skill-coordinator, which discovers the skill in node_modules and registers it in AGENTS.md via a postinstall hook. For pnpm, also allowlist the coordinator's postinstall:
{
"pnpm": {
"onlyBuiltDependencies": ["@netresearch/agent-skill-coordinator"]
}
}This skill is automatically triggered when:
Example queries:
/pr-finish [PR] — drive a pull request to a fully-green, merged state:preflight the merge gate in one block, rebase, fix CI locally, reply to and resolve every review thread, update the title/description, and merge when green. Operates on the named PR or the current branch's PR.
git-workflow-skill/ # abbreviated — key files only
├── skills/git-workflow/
│ ├── SKILL.md # Skill metadata and core patterns
│ ├── ... # checkpoints.yaml, evals/, hooks
│ └── references/
│ ├── commit-conventions.md # Commit message standards
│ ├── pull-request-workflow.md # PR and review processes
│ ├── ci-cd-integration.md # CI watching, git mirrors
│ └── advanced-git.md # Advanced Git operations
├── commands/
│ └── pr-finish.md # /pr-finish slash command
└── scripts/
└── verify-harness.sh # Harness verification scriptfeat/fix/etc.)gh pr checks, gh run watch)git push --mirror gotchas)<type>[optional scope]: <description>
[optional body]
[optional footer(s)]Types:
feat: New feature (MINOR version bump)fix: Bug fix (PATCH version bump)docs: Documentation onlystyle: Code style (formatting, no logic change)refactor: Code refactoringperf: Performance improvementstest: Adding/updating testsbuild: Build system changesci: CI configuration changeschore: Maintenance tasksrevert: Reverting changesBreaking Changes:
feat!: remove deprecated API endpoints
BREAKING CHANGE: The /api/v1/users endpoint has been removed.
Use /api/v2/users instead.# Start of day
git checkout main && git pull
git checkout -b feature/my-feature
# During development
git add -p # Stage hunks interactively
git commit -m "feat: ..." # Commit with conventional message
# Ready for review
git push -u origin HEAD
gh pr create
# After merge
git checkout main && git pull
git branch -d feature/my-feature# Undo last commit (keep changes)
git reset --soft HEAD~1
# Undo last commit (discard changes)
git reset --hard HEAD~1
# Revert a specific commit
git revert <commit-hash>
# Fix last commit message
git commit --amend -m "new message"
# Fix last commit (add forgotten file)
git add forgotten-file.txt
git commit --amend --no-editThis repository follows the organisation-wide policies of Netresearch:
What this repository does to be secure, and what it does not promise, is set out in the security assurance case.
Checks that run on pull requests in this repository:
lint.yml), Eval Validation (eval-validate.yml), Skill Tests (tests.yml) and Hook Script Tests (hook-tests.yml).main, additionally: CodeQL for GitHub Actions and Python with the security-and-quality queries, Betterleaks secret scanning, zizmor workflow analysis, dependency review (fails on high or critical vulnerabilities), Composer Audit and Opengrep SAST (failure threshold: organisation SAST rule), all from security.yml; Harness Verification (harness-verify.yml) and Template Drift (check-template-drift.yml).This project uses split licensing:
See the individual license files for full terms.
Developed and maintained by Netresearch DTT GmbH.
Made with ❤️ for Open Source by [Netresearch](https://www.netresearch.de/)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.