Install
$ agentstack add skill-camilooscargbaptista-cto-toolkit-git-flow ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Git Workflow & Branching Strategy
Help teams choose and follow the right Git workflow. The best workflow is the one your team actually follows consistently.
Branching Strategies
Git Flow (for versioned releases)
Best for: Products with scheduled releases, mobile apps, products with multiple supported versions.
main ─────────●─────────────────●─────────── (production)
│ │
release/1.0 ──┼──●──●──────────┘
│ │
develop ──────┼──┼──●──●──●──●──●──●──────── (integration)
│ │ │ │
feature/auth ─┘ │ │ │
feature/cart ───────┘ │ │
hotfix/crash ─────────────┘ │
feature/search ────────────────────┘
Branches:
main— Production code. Every commit is a release tag.develop— Integration branch. Features merge here.feature/*— New features. Branch from develop, merge to develop.release/*— Release prep. Branch from develop, merge to main + develop.hotfix/*— Production fixes. Branch from main, merge to main + develop.
GitHub Flow (for continuous deployment)
Best for: SaaS, web apps, teams deploying multiple times per day.
main ──●──●──●──●──●──●──●── (always deployable)
│ │ │
│ │ └── feat/notifications (short-lived)
│ └── fix/login-bug
└── feat/dashboard
Rules:
mainis always deployable- Branch from main for any change
- Open a PR, get review, merge to main
- Deploy after merge (automated)
- No long-lived branches
Trunk-Based Development (for high-performing teams)
Best for: Experienced teams with strong CI, feature flags, and automated testing.
main ──●──●──●──●──●──●──●── (deploy continuously)
│ │
└──┘ (very short-lived branches, ():
[optional body — explain WHY, not WHAT]
[optional footer — BREAKING CHANGE, issue refs]
Types
| Type | When | |------|------| | feat | New feature for the user | | fix | Bug fix | | docs | Documentation only | | style | Formatting, no code change | | refactor | Code change that neither fixes nor adds | | perf | Performance improvement | | test | Adding or fixing tests | | chore | Build process, dependencies, CI | | ci | CI/CD configuration changes |
Examples
feat(auth): add OAuth2 login with Google
Implements Google OAuth2 using authorization code flow with PKCE.
Refresh tokens are stored in httpOnly cookies.
Closes #142
---
fix(payment): prevent double-charge on retry
The payment service was not checking idempotency keys on retries,
causing duplicate charges when the client retried after a timeout.
Fixes #256
---
refactor(orders): extract pricing logic into domain service
Moved discount calculation from OrderController to PricingService
to align with Clean Architecture (business logic in domain layer).
BREAKING CHANGE: OrderDTO no longer includes calculatedDiscount field.
Clients should call GET /orders/:id/pricing instead.
Bad Commit Messages
❌ "fix bug"
❌ "update code"
❌ "WIP"
❌ "changes"
❌ "asdfgh"
❌ "fix: fix the thing that was broken"
Pull Request Guidelines
PR Title
Follow the same Conventional Commits format: feat(scope): description
PR Description Template
## What
[Brief description of the change]
## Why
[Motivation — link to issue/ticket]
## How
[Key implementation decisions, if not obvious from the code]
## Testing
[How was this tested? What scenarios were covered?]
## Screenshots
[If UI change — before/after]
## Checklist
- [ ] Tests added/updated
- [ ] Documentation updated
- [ ] No breaking changes (or documented in BREAKING CHANGE)
- [ ] PR is 400 lines (split into smaller PRs)
- Large PRs get worse reviews. Small PRs merge faster.
## Release Management
### Semantic Versioning (SemVer)
MAJOR.MINOR.PATCH │ │ └── Bug fixes (backward compatible) │ └──────── New features (backward compatible) └────────────── Breaking changes
### Release Checklist
1. Create release branch from develop: `release/v1.2.0`
2. Bump version numbers
3. Update CHANGELOG.md
4. Final QA on release branch
5. Merge to main + tag: `git tag -a v1.2.0 -m "Release v1.2.0"`
6. Merge back to develop
7. Deploy from main
### Hotfix Process
1. Branch from main: `hotfix/v1.2.1`
2. Fix the issue
3. Bump patch version
4. Merge to main + tag
5. Merge to develop (don't forget!)
6. Deploy immediately
## Common Git Operations
### Resolving Merge Conflicts
1. `git fetch origin`
2. `git merge origin/main` (or rebase)
3. Resolve conflicts in each file
4. `git add `
5. `git commit` (or `git rebase --continue`)
**Rule:** When in doubt, talk to the other developer whose code conflicts with yours.
### Interactive Rebase (cleaning up before PR)
```bash
git rebase -i HEAD~3 # Squash/reorder last 3 commits
Use before opening a PR to create a clean, logical commit history. Don't rebase commits that are already pushed and shared.
Cherry-Pick (applying specific commits)
git cherry-pick # Apply a specific fix to another branch
Common for applying hotfixes to release branches.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: camilooscargbaptista
- Source: camilooscargbaptista/cto-toolkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.