Doro Git Essentials
ReviewAudited by ClawScan on May 1, 2026.
Overview
This appears to be a benign Git command reference, but it includes powerful Git commands that can delete local work or change shared repositories if run carelessly.
This skill is suitable as a Git reference, but treat commands like reset --hard, clean -fdx, branch/tag deletion, and force-push as dangerous. Only run them after checking the repository, branch, and pending changes, and verify the publisher metadata if provenance matters to you.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run in the wrong repository or branch, these commands could remove local changes or affect collaborators on a shared remote repository.
These documented Git commands can discard local work, delete untracked or ignored files, or rewrite remote history. They are purpose-aligned for a Git reference and are not shown as hidden automatic behavior.
git reset --hard HEAD~1 ... git clean -fdx ... git push --force-with-lease
Confirm the current repository, branch, and files before running destructive Git commands; review diffs first and prefer reversible operations where possible.
Publisher or packaging metadata may be inconsistent, so the source identity is slightly less clear.
The included _meta.json owner and slug differ from the supplied registry metadata, which lists a different owner ID and the slug doro-git-essentials. This is a provenance consistency note, not evidence of malicious behavior.
"ownerId": "kn7anq2d7gcch060anc2j9cg89800dyv", "slug": "git-essentials"
Verify that the registry entry and packaged metadata are from the expected publisher before installing.