git-push-secondary-merge-primary-cn — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited git-push-secondary-merge-primary-cn (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
执行标准的双分支交接流程:在副分支完成工作并推送,再合并到主分支并推送,最后切回副分支。
dev、develop 或其他集成分支。main 或 master。这个流程适合需要同时推送副分支和主分支的发布同步场景,并尽量保留主分支上清晰的合并结果。
当用户要求执行以下操作时使用本技能:
dev → main 或 develop → master以下场景不要使用本技能:
git-weekly-report-cn)code-reviewer 或 frontend-code-review)先按分支识别规则确定主分支和副分支,再按工作流程顺序执行。遇到分支名不明确、合并冲突、脏工作区或推送被拒绝且无法安全处理时,停止并说明阻塞原因,不要猜测执行。
dev 或 main,但仓库实际使用 develop 或 master 时,先核对真实分支再选择。git symbolic-ref refs/remotes/origin/HEAD 识别主分支。main,其次 master。dev,其次 develop。git status --short、git branch --show-current、git remote -v。<secondary_branch> 和 <primary_branch>。<secondary_branch>。<secondary_branch> 上则继续。git checkout <secondary_branch> 与 git pull --ff-only origin <secondary_branch>。<secondary_branch> 上有本地改动,先提交。git add 暂存相关变更,除非用户要求更小的范围。type(scope): 前缀 + 冒号后接中文摘要。--no-verify。<secondary_branch> 无本地改动,跳过提交直接进入推送步骤。<secondary_branch>。git push origin <secondary_branch>。git fetch 并查看再重试;除非用户明确要求,否则不执行强制推送。<primary_branch>。git checkout <primary_branch>。git pull --ff-only origin <primary_branch>。<primary_branch> 未包含 <secondary_branch> 时,使用 git merge --no-ff <secondary_branch> -m "chore(<primary_branch>): 合并 <secondary_branch> 到 <primary_branch>" 保留合并提交。<primary_branch>。git push origin <primary_branch>。<secondary_branch>。git checkout <secondary_branch>。git status --short 和 git branch --show-current 复核。<secondary_branch>。保持最终回复简洁。包含成功推送的分支与提交哈希。若宿主应用支持 Git 指令,仅在对应 Git 动作成功后再发出相关指令。
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.