Git Essentials 1.0.0

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only Git reference appears benign, but it includes normal Git commands that can delete local work or change shared repository history if used carelessly.

This looks safe to install as a Git reference, but do not let an agent run destructive Git commands automatically. Confirm before hard resets, clean operations, branch or tag deletions, rebases, and force pushes, especially in shared repositories.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A careless or unintended use could lose local changes or disrupt a shared repository.

Why it was flagged

These Git command examples can discard local work, delete untracked or ignored files, or rewrite shared remote history. They are expected in a Git essentials reference, but they are high-impact if run without explicit user confirmation.

Skill content
git reset --hard HEAD~1 ... git clean -fdx ... git push --force-with-lease
Recommendation

Confirm the repository, branch, remote, and intended effect before running destructive or history-changing Git commands; prefer preview and reversible commands where possible.

What this means

The publisher/provenance information is not perfectly consistent, so users should rely on the visible skill content rather than assuming official Git authorship.

Why it was flagged

The registry metadata shown separately lists a different owner ID and slug, and the source is marked unknown. Because this is an instruction-only skill with no installable code, this is a minor provenance note rather than evidence of unsafe behavior.

Skill content
"ownerId": "kn7anq2d7gcch060anc2j9cg89800dyv", "slug": "git-essentials"
Recommendation

Review the skill text before enabling it and treat it as a general Git cheat sheet, not as an officially sourced Git tool.