Install
$ agentstack add skill-john-ops-lab-easyuseaide-easyuseaide-high-risk-git-operation ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
高风险 Git 操作
未经用户明确授权,不执行历史重写、强制推送、硬重置、大范围清理或共享分支变基。普通强制推送禁止使用。
普通分支、评审、合并和 worktree 流程继续由当前项目或已有框架管理。本 Skill 不接管完整开发流程,只在即将发生高风险 Git 操作时增加影响确认、恢复能力和远端核验门禁。
1. 确认目标与影响
明确:
- 要解决的问题;
- 目标仓库、远端和分支;
- 是否为共享分支;
- 是否存在 Fork、PR、Release、Tag 或自动部署;
- 哪些提交和对象会受影响;
- 是否有其他协作者;
- 是否涉及敏感信息泄漏。
2. 只读检查
至少检查:
git status --short
git remote -v
git branch -vv
git log --oneline --decorate --graph -n 30
git reflog -n 30
按场景补充检查远端最新提交、Tag、PR 和 Release。
不得在工作区存在未确认修改时直接执行破坏性操作。
3. 建立恢复能力
执行前:
- 创建本地备份分支或 Tag;
- 必要时创建私有
git bundle恢复包; - 记录当前 HEAD 和远端引用;
- 对恢复包设置安全存放位置;
- 在隔离克隆或临时仓库中先验证命令。
4. 优先低风险方案
按风险由低到高选择:
- 新提交修复;
git revert;- 仅本地交互式 rebase;
- 经授权的历史重写;
- 经授权的
--force-with-lease。
能用 revert 解决时,不重写共享历史。
5. 执行约束
- 每一步后检查结果;
- 不串联大量不可逆命令;
- 不使用普通
--force; git reset --hard和git clean前明确列出将丢失内容;- 历史过滤操作先在隔离仓库验证;
- 远端在检查后发生变化时,停止强推并重新评估。
6. 完成验证
历史重写或敏感清理后:
- 使用全新克隆验证公开可达历史;
- 重新运行敏感信息扫描;
- 验证分支、Tag、CI、PR 和 Release;
- 说明托管平台可能暂时保留不可达旧对象;
- 告知协作者重新同步的方法。
7. 交付报告
说明执行原因、实际命令、影响范围、恢复点、验证结果、协作者需要执行的操作和剩余风险。
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: john-ops-lab
- Source: john-ops-lab/EasyUseAIDE
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.