Git Workflow

Use this skill for any git commit, pull request, or release task. Invoke immediately when the user wants to: stage and commit changes, write a commit message...

Security Scan

The skill's files, requirements, and instructions match a git commit/PR/release helper; nothing requested or installed is disproportionate to that purpose.

Purpose & Capability

Name/description match required artifacts: the skill needs git (declared) and optionally gh for PRs/releases. The included validator and templates are appropriate for a git workflow helper.

Instruction Scope

Instructions stay within git/PR/release tasks, include a local Python validator and use git/gh commands. One notable policy: 'Commit always pushes — Do not ask.' This is coherent with a workflow helper but is a behavior the user should be aware of because it will modify and push repository state without an extra confirmation step.

Install Mechanism

Instruction-only skill (no external install fetch). It ships a small included Python script (scripts/validate_commit.py). No downloads or external install URLs are used.

Credentials

The skill requests no environment variables or credentials. It suggests using gh auth login for GitHub operations but does not require or request tokens itself — this is proportional for GitHub PR/release functionality.

Persistence & Privilege

always is false and model invocation is allowed (platform default). The practical implication: the skill will run git/gh commands that can change repo state (commits, push, tags, create releases). That level of privilege is expected for a git workflow skill but warrants user attention before enabling autonomous invocation.

Assessment

This skill appears coherent and implements a typical git/PR/release workflow. Before installing: (1) be aware it will run git/gh commands and (per its default behavior) will push commits immediately without asking — only enable it where automatic pushes are acceptable; (2) ensure your local repo remotes are correct (it will push to upstream/origin as described); (3) use gh auth login yourself if you want PR/release capability — the skill does not request tokens but will rely on existing gh auth; (4) review the included scripts (scripts/validate_commit.py) if you want to confirm validation rules (it explicitly forbids AI markers like 'Claude'); (5) avoid granting extra credentials to the environment unless you intend to let the skill perform remote operations. Overall this is consistent with its stated purpose.

Standardized Git workflow for commits, pull requests, and releases using conventional commits format and semantic versioning.

Prerequisites

Tool	Type	Required	Install
git	cli	Yes	brew install git or git-scm.com
gh	cli	No	brew install gh then gh auth login (required for PR and Release)

Do NOT proactively verify these tools on skill load. If a command fails due to a missing tool, directly guide the user through installation and configuration step by step.

When to Use

• Creating commits: Follow conventional commits with concise, imperative messages
• Creating pull requests: Generate PR with clear description and test plan
• Creating releases: Update versions, CHANGELOG, tags, and GitHub releases

These workflows can be used independently or together as needed.

Platform Detection

Check git remote get-url origin to select workflow:

Remote URL contains	Commits/Tags/Releases	PR/MR
github.com	This skill	This skill (gh pr create)
codeup.aliyun.com	This skill	Switch to yunxiao skill
gitlab.com	This skill	This skill (adapt for GitLab CLI)

Quick Reference

Commit Format

type(scope): concise summary

- Optional bullet points (max 3-4)
- Keep short and focused

Types: feat, fix, refactor, docs, test, chore

Branch Naming

• feature/description
• fix/description
• docs/description
• refactor/description
• test/description

Release Checklist

1. Update version in project files
2. Update CHANGELOG.md
3. Commit: chore(release): bump version to x.y.z
4. Tag: git tag v{version} && git push upstream v{version}
5. Create GitHub release with gh release create

Default Behaviors

• Keep messages concise: Commit messages and PR titles must be short and to the point. Omit filler words. The diff shows "what" — the message explains "why".
• No AI signatures: Never include Co-Authored-By: Claude, Generated with Claude Code, or any AI markers in commits or PRs.
• Commit always pushes: After commit, always push immediately. Do not ask.
  • Has upstream tracking → git push
  • No upstream tracking → git push -u origin <branch>

Detailed Guides

See examples-and-templates.md for commit examples (good/bad), PR body template, and CHANGELOG format.

Validation

Use scripts/validate_commit.py to validate commit messages:

python3 scripts/validate_commit.py "feat(auth): add OAuth2 support"
python3 scripts/validate_commit.py --file .git/COMMIT_EDITMSG

The validator checks:

• Conventional commits format
• Subject line length (< 72 chars)
• Imperative mood usage
• Absence of AI-generated markers
• Body format and bullet point count

Common Workflows

Commit (default: commit + push)

git add <files>
git commit -m "feat(component): add new feature" && git push

Pull Request

git checkout -b feature/new-feature
# ... make changes, commit (auto-pushes per default behavior) ...
gh pr create --title "feat(component): add new feature" --body "..."

Release

# Update version files + CHANGELOG.md
git add .
git commit -m "chore(release): bump version to 1.2.0" && git push
git tag v1.2.0 && git push upstream v1.2.0
gh release create v1.2.0 -R owner/repo --title "v1.2.0" --notes "..."

Common Issues

Issue	Cause	Fix
Subject line > 72 chars	Description too long	Shorten summary, put details in body
Multiple types in one commit	Scope too large	Split into single-purpose commits
Merge commits appear	Used merge	Use git pull --rebase
Validator script errors	Format mismatch	Check type(scope): format