Install
$ agentstack add skill-ucdavis-ai-skills-registry-git-workflow-general ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ● Environment & secrets Used
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Git Workflow
Branch Naming
/
| Type | Use for | |------|---------| | feat | New functionality | | fix | Bug fixes | | chore | Tooling, deps, config | | refactor | Code improvements, no behavior change | | docs | Documentation only | | test | Adding or fixing tests | | hotfix | Urgent production fix |
Examples: feat/user-auth, fix/login-redirect, chore/upgrade-node
Commit Messages (Conventional Commits)
():
[body — explain why, not what]
[footer — Closes #123, breaking changes]
- Subject: imperative mood, no period, max 72 characters.
- Body: explain why the change was made. Reference issues.
feat(auth): add JWT refresh token support
Adds sliding window refresh to prevent session expiry during active use.
Tokens expire after 7 days of inactivity. Refresh endpoint is POST /auth/refresh.
Closes #142
Pull Requests
- Title: follows conventional commit format.
- Description: what changed, why, and how to test it.
- Size: one logical change per PR. Large PRs get worse reviews.
- Reviewers: request at least one before merging.
- Link: reference the related issue.
Merge Strategy
- Squash and merge for feature branches → clean linear history on
main. - Merge commit for release branches → preserves release history.
- Delete branches after merge.
- Never force-push to
mainordevelop.
Rules
- Never commit
.envfiles, secrets, or credentials. - Add
.env.examplewith placeholder values. - CI must be green before merging.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ucdavis
- Source: ucdavis/ai-skills-registry
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.