Git Workflow Assistant
PassAudited by VirusTotal on May 6, 2026.
Overview
Type: OpenClaw Skill Name: eric-git-workflow Version: 1.0.0 The skill bundle provides standard documentation and command-line examples for Git workflows, including branching strategies, commit conventions, and conflict resolution. All files (SKILL.md, references/workflows.md) contain legitimate educational content and standard Git commands without any signs of malicious intent, data exfiltration, or prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If a user runs these commands in the wrong repository or branch, they could lose local work or disrupt shared Git history.
These documented Git commands can rewrite remote branch history or discard local changes. They are expected for advanced Git workflow guidance, but they require user care.
`git push --force-with-lease`; `git reset --hard HEAD~1`
Run destructive or history-rewriting Git commands only after checking `git status`, confirming the target branch, and understanding whether the branch is shared.
Global aliases affect Git usage across repositories and may surprise users later if they forget the aliases exist.
The skill suggests persistent global Git configuration changes. This is a normal Git customization pattern, not hidden background behavior, but it changes future Git behavior until removed.
git config --global alias.undo "reset --soft HEAD~1"
Only add global aliases you want permanently; use local repository config or document the change if you prefer scoped behavior.
Users cannot easily verify the author, upstream project, or update history outside the registry metadata.
The registry entry does not identify an upstream source or homepage. Because this is instruction-only with no install code, the practical supply-chain risk is low, but provenance is limited.
Source: unknown; Homepage: none
Review the included text before use and prefer skills with clear provenance when installing more powerful or executable skills.