reachable-wip-via-temporary-refs-d89245 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited reachable-wip-via-temporary-refs-d89245 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Domain: safety-worktrees Trigger: Apply when bundling or seeding a repository and you want to include uncommitted work without disturbing the working tree or leaving dangling refs. Source Pattern: Distilled from reviewed repo-safety, packaging, and worktree-management patterns.
Call git stash create to materialize the working tree and index into a temporary commit while leaving the workspace untouched. If the command returns a SHA then advertise it via a short-lived ref such as refs/seed/stash so downstream tooling (bundle list-heads, receivers) can reach those objects; treat an empty response as “no WIP,” log both success and error cases, and clean up the temporary ref after the upload completes or earlier runs leave stale pointers.
refs/seed/stash, refs/seed/root) before bundling so previous runs do not influence new bundles or leak stale WIP markers.git stash create can fail non-fatally; log the stderr, skip ref creation, but continue bundling the committed tree.git update-ref refs/seed/stash <sha> when the stash SHA is non-empty; otherwise the ref would dereference to nothing.hasWip) when the temporary stash exists so telemetry and later steps can know whether to expect extra objects.finally block), delete the temporary refs even if the upstream run failed to keep the user repo clean.When writing an upload helper for a CLI that seeds a remote CCR process, use this skill to wrap the git stash create/git update-ref pair, expose hasWip, and ensure the finally block always runs git update-ref -d refs/seed/stash before returning.
git bundle should not touch the user-visible stack; git stash create avoids a working-tree mutation.refs/seed/stash behind pollutes the repo and may cause future bundling runs to include WIP twice.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.