git-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited git-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Determine which workflow the user needs:
Ask clarifying questions only if the intent is ambiguous.
When writing commit messages, follow the Conventional Commits specification:
<type>[optional scope]: <description>
[optional body]
[optional footer(s)]Types (in order of frequency):
feat - new feature (correlates with MINOR in semver)fix - bug fix (correlates with PATCH in semver)docs - documentation onlystyle - formatting, no code changerefactor - neither fix nor featureperf - performance improvementtest - adding or fixing testschore - build process, tooling, dependenciesci - CI/CD configuration changesRules:
! after type or BREAKING CHANGE: in footerExamples:
feat(auth): add OAuth2 login with Google provider
Implements the OAuth2 authorization code flow for Google.
Stores tokens in encrypted session storage.
Closes #142fix(api): prevent race condition in concurrent order creation
Added optimistic locking with version column check.
Returns 409 Conflict when version mismatch detected.Recommend based on team size and release cadence:
Trunk-Based Development (recommended for most teams):
main branch, always deployableGitHub Flow:
main branch + feature branchesmain after mergeGitFlow (only for complex release schedules):
main, develop, feature/*, release/*, hotfix/*Provide the branching diagram and example commands for the chosen strategy.
When helping resolve conflicts:
<<<<<<< HEAD (your changes)
[your code]
=======
[their code]
>>>>>>> feature-branch (incoming changes) # After resolving
git add <resolved-files>
git commit # or git rebase --continueGenerate changelogs from conventional commits:
## [1.2.0] - 2024-01-15
### Added
- OAuth2 login with Google provider (#142)
- Rate limiting on public API endpoints (#156)
### Fixed
- Race condition in concurrent order creation (#163)
- Memory leak in WebSocket connection handler (#158)
### Changed
- Upgraded Node.js requirement to v18+ (BREAKING)Process:
git log v1.1.0..HEAD --onelineUser says: "Write a commit message for adding email validation to the signup form"
Response:
feat(signup): add email validation with DNS MX record check
Validates email format client-side and verifies MX records server-side.
Displays inline error message when validation fails.
Debounces server check by 500ms to reduce API calls.
Closes #89~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.