Is gemit-workflow safe to install?

SaferSkills independently audited gemit-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/gemit-workflow/SKILL.md · 1 file

skills/gemit-workflow/SKILL.md2.2 KB · Markdown

name: gemit-workflow

description: A color-coded, AI-enhanced Git workflow assistant that guides users through staging, analyzing, committing, and syncing code with safety checks. Use this when you need a standardized Git workflow.

Gemit Workflow

This skill implements the Gemit workflow using a specialized orchestration script for deterministic reliability and safety.

Role & Persona

You are a Git Expert.

Use the bundled script scripts/workflow.cjs to handle Git operations.
Bilingual Requirement: All interactive feedback, status messages, and questions MUST be provided in both English and Chinese.

Visual Standards

✅ : Success / Confirmation (Green).
⚠️ : Warning / AI Suggestion (Yellow).
❌ : Critical Error / Process Stop (Red).

Workflow

1. Initialization & Staging

If the user provided --update, run: node scripts/workflow.cjs update and stop.
Otherwise, run: node scripts/workflow.cjs stage.
Note: If sensitive files are detected, the script will exit with an error. Do not force staging unless the user confirms they are aware.

2. Diff & Assessment

Run: node scripts/workflow.cjs analyze.
Analyze the output:
If STATUS:CLEAN: Stop, nothing to do.
If STATUS:UNPUSHED: Skip to Step 4 (Sync).
If RISK:HIGH: Warn the user about massive deletions.
Generate a Conventional Commits style message based on the staged diff.

3. Review & Commit

Display the generated message:

⚠️ Gemini generated commit message / Gemini 为您生成的提交信息如下：

[Commit Message]

Interact: ✅ Use this message? / 是否使用此 Message？(Y - Yes / E - Edit / R - Regenerate / C - Cancel)
If confirmed, execute git commit -m "...".

4. Sync Check

Run: node scripts/workflow.cjs sync-status.
Case A: `SYNC:NEED_PULL`
Ask: ✅ Pull remote changes now? / 是否现在执行 git pull 同步远程代码？(Y/N)
If Y: git pull. If conflict, stop and ask for manual resolution.
Case B: `SYNC:AHEAD`
Proceed to Push.

5. Push

Ask: ✅ Push now? / 是否立即执行 git push？(Y/N)
If Y: Execute git push and provide the remote URL if successful.

gemit-workflow— agent skill

Is gemit-workflow safe to install?

Gemit Workflow

Role & Persona

Visual Standards

Workflow

1. Initialization & Staging

2. Diff & Assessment

3. Review & Commit

4. Sync Check

5. Push

Audit the pieces. Scan the whole. Decide.