Install
$ agentstack add skill-christophezhao-vibe-coding-skills-checkpoint-commit-advisor ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Checkpoint Commit Advisor
Purpose
Use this skill when complex work should not continue on top of a noisy dirty worktree without first deciding whether to freeze the current state as one or more checkpoint commits. The skill provides a commit-strategy advisory loop: inspect worktree state, decide whether to commit now or defer, propose one or more commit layers, and require explicit user confirmation before any real git write.
Activation Cues
Activate when any condition is true:
- A large or mixed dirty worktree exists and the next phase is about to begin.
- The user asks whether to commit before opening a new plan, successor plan, or new window.
- The user asks for a checkpoint commit, WIP snapshot, governance anchor, or known-bad snapshot strategy.
- A long refactor is about to touch the same core files that are already dirty.
Do not activate when any condition is true:
- The task is a one-off tiny edit with a small, obvious worktree.
- The request is only to create or update a plan lifecycle state.
- The request is to validate a checkpoint or stage gate rather than decide commit strategy.
- The request is generic git history work such as rebase, squash, cherry-pick, amend, or force-push.
Scope Limit
This skill does:
- checkpoint commit strategy analysis for dirty worktrees
- proposal of one-layer, two-layer, or three-layer checkpoint commit plans
- file bucketing, message planning, and confirmation-point output
- lightweight deterministic git-state inspection through a local analysis script
This skill does not:
- own
docs/plans/PLAN_INDEX.jsonlifecycle state - own checkpoint validation or auto-remediation verdicts
- generate session handoff packs
- guarantee code correctness
- silently execute
git addorgit commit - become a generic git workflow or history-rewrite assistant
Ownership Boundary
sdd-plan-maintainerowns plan definition and lifecycle governance.checkpoint-gatekeeperowns checkpoint validation and gate verdicts.session-handoffowns next-window continuation packs.layered-project-memoryowns durable project memory and may later consume commit anchors.checkpoint-commit-advisorowns the decision surface: whether to freeze the current dirty worktree now, and how to layer that checkpoint commit strategy.
Boundary rule:
- This skill may read plan or handoff context for labeling, but it must not mutate plan lifecycle or produce a second truth source.
- The default output is advisory. Real git writes require explicit user confirmation.
Script Decision
Use the skill-bundled scripts/commit_advisor.py (resolved relative to this skill root) for deterministic dirty-tree analysis and proposal output. Use the skill-bundled scripts/smoke.sh for structure and minimal CLI-contract checks.
Workflow Contract
- Inspect the dirty worktree and collect health signals.
- Decide whether checkpoint commit strategy is warranted now or should be deferred.
- If warranted, propose one-layer, two-layer, or three-layer commit structure.
- For each proposed layer, list file buckets, commit intent, and suggested message.
- Surface risks and confirmation points.
- Only after explicit user confirmation should the host agent translate the proposal into real
git add/git commitactions.
Hard Rules
- Never silently stage or commit changes.
- Never present a checkpoint commit as proof of correctness.
- Treat “wrong but explainable” as acceptable for snapshot commits; treat corrupted or ambiguous worktree state as a blocker.
- Keep heuristics explainable and conservative.
- Avoid overlap with lifecycle, gate, handoff, or memory ownership.
Resource Map
- Read
references/positioning-boundary.mdfor the layer split and non-goals. - Read
references/trigger-rules.mdfor trigger and non-trigger signals. - Read
references/process-protocol.mdfor the advisory workflow. - Read
references/output-contract.mdfor output schema and commit-layer semantics. - Read
references/regression-cases.mdfor trigger-boundary and blocking regression cases. - Read
references/examples/README.mdfor positive and negative examples. - Use the skill-bundled
scripts/commit_advisor.pyfor deterministic advisory output. - Use the skill-bundled
scripts/smoke.shfor deterministic smoke checks.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ChristopheZhao
- Source: ChristopheZhao/vibe-coding-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.