Install
$ agentstack add skill-olivierhijlk1-github-auto-backup-github-auto-backup ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
GitHub Auto Backup
Manage Git and GitHub for every project so the user ALWAYS has an up-to-date copy on GitHub. Work autonomously for routine version control; pause only for the risky actions listed below. Treat an unpushed change as an unfinished task.
Preflight — always first
git --versionmust exist. If git is missing, give the install command and
STOP — local versioning is not possible without it.
- Check GitHub availability with
gh --versionandgh auth status. Do NOT
hard-stop if gh is missing or not logged in — instead note it and let the interview below decide (the user may want GitHub, may want help setting it up, or may prefer to stay local-only).
Starting a new project — ask first, confirm once
Do NOT create anything yet. First ask whether the user wants an off-machine backup at all:
- GitHub backup? — "Do you want this project backed up to GitHub, or keep
it local-only for now?"
- If they want GitHub but
ghis missing or not authenticated, offer to help
connect: guide them through installing gh and running gh auth login. If they would rather not right now, fall back to local-only.
- Local-only path: skip the GitHub questions. Just confirm the default
branch and a stack-based .gitignore, then git init, add .gitignore (+ optional license/README), and make the initial commit. Tell them you can connect GitHub anytime later (see "Connecting GitHub later").
If they DO want GitHub, ask these, proposing sensible defaults so they can just say "ok":
- Visibility — public or private? (default: private)
- Repo name — propose one based on the folder name.
- Account / organization — which owner? (default: personal account)
.gitignore/ license / README — propose a.gitignorebased on the
detected stack; ask which license (if any) and whether to generate a README.
- Default branch — (default: main)
Then summarize the choices in a short list and confirm ONCE. Only after the user says yes:
git init -band add the chosen.gitignore(always exclude
.env, *.key, secrets, node_modules/, build output), license and README.
- Make the initial commit.
- Create the GitHub repo with the chosen visibility:
`` gh repo create / -- --source=. --remote=origin --push ``
- Report the repo URL.
Connecting GitHub later
If a local-only project should later get a remote (the user asks, or you remind them), make sure gh is authenticated, then run the same gh repo create command above with --source=. to publish the existing history and push.
During the project — work autonomously
Do these WITHOUT asking each time, using conventional commit messages (feat:, fix:, chore:, docs:, refactor:, test:, …):
git pull --rebasebefore starting work so the local copy never diverges.git add -Aand commit after each unit of work.- Push to the remote — automatic for private repos (for public repos see
gated actions below).
- Create and switch branches as needed for focused work.
- Keep local and remote in sync.
Local-only projects (no remote): still commit after each unit of work so history is preserved, and skip the push/pull steps. Now and then remind the user there is no off-machine backup yet and offer to connect GitHub.
Report briefly what you did (commit hash + files changed).
Ask permission first — risky / irreversible
STOP and ask for explicit confirmation before:
- Pushing to a public repo.
- Opening or merging a pull request.
- Force pushing (
--force/--force-with-lease). - Deleting branches (local or remote).
- Changing repository settings (visibility, default branch, collaborators, …).
Never do
- Permanently delete a repository.
- Change visibility from private to public without explicit confirmation.
- Commit secrets or tokens. Make sure
.env, keys and tokens are in
.gitignore before the first push. If a secret is already staged, unstage it and warn the user.
Merge conflicts
Do not auto-resolve. Show the conflicting files and let the user decide how to resolve them, then continue and report.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: OlivierHijlk1
- Source: OlivierHijlk1/github-auto-backup
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.