Install
$ agentstack add skill-mishrashardendu22-agent-skills-git-commit-workflow Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Destructive filesystem operation.
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Git Commit Design & Workflow Standards
This skill defines the Commit Design Taxonomy, commit classification standards, message conventions, validation requirements, and the strict Human-In-The-Loop (HITL) Push Boundary for all AI agents and human contributors in the GitHub Backup Automation System repository.
1. High-Priority Rule: Frequent, Atomic & Explanatory Commits
> [!IMPORTANT] > COMMIT FREQUENTLY AT EACH LOGICAL STEP (More Commits = More Explanatory Work): > AI agents and developers MUST prioritize creating granular, atomic Git commits at each important milestone or distinct phase of work rather than bundling everything into one monolithic commit at the end. > Each commit MUST encapsulate a single logical responsibility (e.g. creating Dockerfiles, adding an API route, optimizing a database index, updating UI styling, documentation updates). > Never mix unrelated concerns in a single commit (e.g. do NOT combine a database migration with a frontend UI redesign). > Granular commits make code reviews clear, bisecting simple, rollbacks safe, and capture explanatory architectural progress in the repository history.
2. Commit Design Taxonomy & Classification
All commits in this repository MUST be classified under one of the standard commit categories outlined below. Agents must only construct commits adhering strictly to this taxonomy:
┌─────────────────────────────────────────────────────────────────────────┐
│ COMMIT DESIGN TAXONOMY │
├───────────────┬─────────────────────────────────────────────────────────┤
│ feat │ Feature Addition (new capability, endpoint, service) │
│ perf │ Performance Optimization (caching, query/vector speed) │
│ refactor │ Structural Improvement (cleaner code, zero logic change)│
│ fix │ Bug Fix & Error Resolution (runtime fix, edge cases) │
│ ui / style │ UI & Visual Design (Tailwind, components, theme, layout)│
│ ci / deploy │ CI/CD, Containerization & DevOps (Actions, Docker, YAML)│
│ db │ Database & Migration (idempotent schemas, pgvector) │
│ test │ Testing & Quality Assurance (unit, mock, agent tests) │
│ docs │ Documentation & Specifications (README, SKILL.md, docs) │
│ chore │ Routine Maintenance (dependency updates, tool configs) │
└───────────────┴─────────────────────────────────────────────────────────┘
Category 1: Feature Addition (feat)
- Purpose: Adding new functional capabilities, API endpoints, worker tasks, AI agent tools, connector vault integrations, or background services.
- Format:
feat(): - Criteria: Introduces new executable functionality. Must include all necessary code and interfaces for that specific feature slice.
- Allowed Scopes:
backend,observatory,frontend,worker,agent,connectors,storage,mcp,api - Examples:
feat(observatory): add OpenRouter multi-key automatic failover clientfeat(worker): implement SHA-256 archive checksum generation and verificationfeat(connectors): add AES-256 encrypted credential vault repositoryfeat(mcp): implement native GitHub Backup MCP server tool handlers
Category 2: Improvement & Optimization (perf, refactor)
- Purpose: Enhancing execution speed, decreasing memory footprint, reducing LLM token consumption, accelerating vector search, or restructuring code without changing user-observable behavior.
- Format:
- Performance:
perf(): - Restructuring:
refactor(): - Criteria: Code maintains 100% backward compatibility and passes existing test suites while delivering measurable efficiency or architectural clarity gains.
- Allowed Scopes:
db,vector,observatory,backend,worker,cache,websocket - Examples:
perf(db): add GIN index on execution_logs for sub-millisecond FTS queriesperf(observatory): cache OpenRouter model capability registry in-memoryrefactor(backend): consolidate WebSocket hub client connection lifecyclerefactor(worker): decouple backup execution loop from direct database calls
Category 3: Fix & Bug Resolution (fix)
- Purpose: Resolving runtime defects, unexpected panics, unhandled exceptions, race conditions, type mismatches, network timeout errors, or secret scanner alerts.
- Format:
fix(): - Criteria: Addresses a specific malfunction or regression. The commit message body should explain the root cause and the fix applied.
- Allowed Scopes:
agent,docker,ci,db,auth,api,worker,frontend - Examples:
fix(agent): prevent session crash by rotating OpenRouter key on 429 rate limitfix(docker): enable --ignore-scripts in Next.js builder for pnpm 10 compatibilityfix(db): ensure migration 000004 applies idempotent alter column statementfix(ci): resolve go.mod toolchain version mismatch in GitHub Actions runner
Category 4: UI & Visual Design (ui, style)
- Purpose: Creating or refining user interfaces, dashboard components, Tailwind CSS styling, responsive grid layouts, dark/light theme palettes, data charts, and interaction animations.
- Format:
ui():orfeat(ui): - Criteria: Confined to visual presentation, component UX, styling, and design system elements without modifying backend business logic.
- Allowed Scopes:
dashboard,analytics,backups,ai-chat,connectors,theme,components - Examples:
ui(dashboard): modernize real-time backup run progress cards and status badgesui(analytics): add interactive latency distribution charts with rechartsui(theme): implement high-contrast dark mode color palette for AI chatui(components): add confirmation modal for Human-In-The-Loop agent approvals
Category 5: CI/CD, Containerization & DevOps (ci, deploy)
- Purpose: Managing GitHub Actions workflows, multi-stage Dockerfiles, Docker Compose files, Render blueprints (
render.yaml), Vercel project configurations, and Git hooks. - Format:
ci():orfeat(deploy): - Criteria: Infrastructure as Code, automation pipelines, build tooling, and container packaging.
- Allowed Scopes:
actions,docker,render,vercel,hooks,precommit - Examples:
ci(actions): implement production-grade automated CI/CD pipeline with Docker Hubfeat(deploy): configure Render Blueprint and Vercel project configurationsci(docker): switch Go builder to golang:alpine for multi-platform compatibilityfeat(hooks): configure comprehensive pre-commit and pre-push validation gates
Category 6: Database & Schema Evolution (db)
- Purpose: Creating idempotent SQL schema migrations, adding pgvector vector columns, defining indexes, setting up Neon database branching scripts, or configuring connection pools.
- Format:
db():orfeat(db): - Criteria: Never uses destructive
DROP TABLEorTRUNCATE. Must useCREATE TABLE IF NOT EXISTSandCREATE INDEX IF NOT EXISTS. - Allowed Scopes:
migrations,neon,pgvector,indexes,pool - Examples:
db(migrations): add 000006_create_connectors_table for encrypted credential vaultfeat(database): implement Neon multi-environment database branching scriptsdb(pgvector): add HNSW vector index generation lifecycle triggers
Category 7: Testing & Quality Assurance (test)
- Purpose: Adding or improving unit test suites, integration tests, mock HTTP/WebSocket servers, AI agent multi-turn conversation evaluation fixtures, and static test runners.
- Format:
test(): - Criteria: Expands test coverage or adds regression test cases without modifying production runtime code.
- Allowed Scopes:
observatory,backend,worker,frontend,e2e,agent - Examples:
test(observatory): add test suite for multi-turn HITL confirmation workflowtest(backend): add unit tests for WebSocket client hub lifecycle and message relaytest(worker): add mock GitHub API server for repository deduplication tests
Category 8: Documentation & Architectural Blueprints (docs)
- Purpose: Updating repository guides, architecture documents, system diagrams, Agent skills (
.agents/skills/), CHANGELOG notes, and developer setup instructions. - Format:
docs(): - Criteria: Changes strictly confined to Markdown files, diagrams, or inline documentation.
- Allowed Scopes:
roadmap,architecture,skills,deployment,readme,changelog - Examples:
docs(roadmap): specify enterprise SaaS transformation and native MCP ecosystemdocs(skills): document commit design taxonomy and authenticated CLI tooling guidedocs(deployment): document automated CI/CD pipeline and Neon branching runbooks
3. Mandatory Local Branch First
> [!IMPORTANT] > ALWAYS CREATE A LOCAL BRANCH FIRST: > Before modifying any files or creating commits, the agent/developer MUST verify they are on a dedicated local feature branch (//). > ``bash > git switch -c MishraShardendu22/main/ > ` > NEVER make changes, staging, or commits directly on main or dev`.
4. The Strict Push Permission Boundary (HITL)
┌─────────────────────────────────────────────────────────┐
│ AGENT DOMAIN │
│ │
│ 1. Modify files for specific logical milestone │
│ 2. Run linters, type checks, and pre-commit gates │
│ 3. Create LOCAL signed Git commit (git commit -s -S) │
│ 4. Repeat steps 1-3 for each milestone │
└────────────────────────────┬────────────────────────────┘
│
[HUMAN REVIEW BOUNDARY]
│
┌────────────────────────────▼────────────────────────────┐
│ HUMAN DOMAIN │
│ │
│ 5. Human inspects git diff and git log │
│ 6. Human decides whether to push or request changes │
│ 7. Human executes git push origin (or prompts)│
└─────────────────────────────────────────────────────────┘
> [!CAUTION] > NO AUTOMATIC REMOTE PUSH: > Agents are permitted and encouraged to create local Git commits (git commit -s -S). > Agents must never run git push or create Pull Requests automatically without explicit user instruction. > Pushing to remote and opening a Pull Request is permitted ONLY when explicitly requested by the human user (e.g. "create a PR to main"). > All Pull Requests must target main only.
5. Mandatory Sign-off (-s) and Signing (-S) Flags
> [!IMPORTANT] > ALL COMMITS MUST BE SIGNED AND SIGNED-OFF: > Whenever an agent or developer creates a Git commit, it MUST include both -s and -S flags: > -s (--signoff): Adds the standard Signed-off-by: Author trailer (DCO compliance). > -S (--gpg-sign): Cryptographically signs the commit with the configured GPG/SSH signing key.
6. Pre-Commit Validation Checklist
Before staging files or creating a local commit, the agent MUST verify that the code passes validation:
# Unified pre-commit validation gate
make pre-commit
# Or individual verifications:
make lint # Checks Biome, Go vet, Pyright
make typecheck # Runs Pyright (Python) and tsc (TypeScript)
make test # Runs Go and Python test suites
make build # Builds Go binaries and Next.js frontend
7. Step-by-Step Commit Runbook for AI Agents
Follow this exact sequence whenever recording progress:
- Check Working Tree & Staged Changes:
``bash git status ``
- Stage Granular Files for Current Milestone:
``bash # Stage only files belonging to this logical milestone git add ``
- Select Appropriate Category from Commit Design Taxonomy:
feat(...)for feature additionsperf(...)/refactor(...)for improvements & optimizationsfix(...)for bugs & error resolutionui(...)/style(...)for frontend & designci(...)/deploy(...)for CI/CD, Docker & DevOpsdb(...)for database migrations & schemastest(...)for test suitesdocs(...)for documentation & skills
- Execute Signed Commit:
``bash git commit -s -S -m "(): " ``
- Verify Commit Signature & Metadata:
``bash git log -n 1 --show-signature --stat ``
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: MishraShardendu22
- Source: MishraShardendu22/agent-skills
- License: MIT
- Homepage: https://github.mishrashardendu22.is-a.dev
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.