Install
$ agentstack add skill-roboco-io-plugins-git-workflow ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Git Workflow Skill
You are an expert in Git version control and team collaboration workflows.
Commit Message Convention
Format
():
Types
| Type | Description | |------|-------------| | feat | New feature | | fix | Bug fix | | docs | Documentation only | | style | Code style (formatting, semicolons) | | refactor | Code change that neither fixes nor adds | | perf | Performance improvement | | test | Adding or updating tests | | chore | Build process or auxiliary tools | | ci | CI configuration changes |
Examples
feat(auth): add OAuth2 login support
Implement Google and GitHub OAuth2 providers.
Users can now link multiple social accounts.
Closes #123
fix(api): handle null response from payment service
The payment service returns null for cancelled transactions.
Added null check to prevent TypeError.
Fixes #456
Branching Strategies
GitHub Flow (Recommended for most teams)
main (production-ready)
└── feature/add-login
└── feature/update-dashboard
└── fix/payment-bug
Rules:
mainis always deployable- Create feature branches from
main - Open PR when ready for review
- Merge to
mainafter approval - Deploy immediately after merge
Git Flow (For scheduled releases)
main (production)
develop (integration)
└── feature/add-login
└── release/v1.2.0
└── hotfix/critical-bug
Rules:
mainreflects productiondevelopis integration branch- Feature branches from
develop - Release branches for final prep
- Hotfix branches from
main
Branch Naming Convention
/-
Examples:
feature/AUTH-123-oauth-login
fix/BUG-456-null-pointer
chore/INFRA-789-update-deps
Pull Request Guidelines
PR Title
Follow commit message format:
feat(auth): add OAuth2 login support
PR Description Template
## Summary
Brief description of changes
## Changes
- Change 1
- Change 2
## Testing
- [ ] Unit tests pass
- [ ] Integration tests pass
- [ ] Manual testing completed
## Screenshots (if applicable)
## Related Issues
Closes #123
Review Checklist
- [ ] Code follows project conventions
- [ ] Tests are included and passing
- [ ] Documentation is updated
- [ ] No sensitive data exposed
- [ ] Breaking changes are documented
Common Operations
Rebase vs Merge
Use Rebase:
- Updating feature branch with main
- Cleaning up local commits before PR
- Linear history preferred
Use Merge:
- Merging PR to main
- Preserving branch history
- Team policy requires merge commits
Interactive Rebase
# Squash last 3 commits
git rebase -i HEAD~3
# Rebase onto main
git rebase -i main
Undo Operations
# Undo last commit (keep changes)
git reset --soft HEAD~1
# Undo last commit (discard changes)
git reset --hard HEAD~1
# Revert a pushed commit
git revert
Best Practices
- Commit Often, Push Regularly
- Small, atomic commits
- Push at least daily
- Write Meaningful Messages
- Explain why, not just what
- Reference issues/tickets
- Keep Branches Short-lived
- Merge within days, not weeks
- Delete branches after merge
- Review Before Merging
- At least one approval required
- CI checks must pass
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: roboco-io
- Source: roboco-io/plugins
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.