Essential Git commands and workflows for version control, branching, and collaboration.
Security Analysis
high confidenceThe skill is an instruction-only Git reference whose requested actions and scope match its description; nothing requested is disproportionate, though it includes destructive Git commands and a small metadata mismatch you should be aware of.
The name/description (Git commands and workflows) matches the SKILL.md content. The SKILL.md metadata declares a dependency on the git binary (requires bins: ["git"]), which is appropriate for this purpose — note the registry metadata earlier listed no required binaries, so there is a minor inconsistency between the manifest and the in-file metadata.
Instructions are limited to Git usage (config, clone, commit, branch, merge, push, reset, clean, etc.). They do modify user state (e.g., writing to ~/.gitconfig via git config --global) and include destructive operations (git reset --hard, git clean -fdx, force pushes), which are expected for a Git reference but can cause data loss if used carelessly.
This is an instruction-only skill with no install spec and no code files, so nothing is downloaded or written to disk by the skill itself — lowest-risk install footprint.
The skill does not request environment variables or credentials, which is proportional. Note that interacting with remotes (clone/push/pull) will use whatever Git auth is available on the host (SSH keys, credential helpers, or interactive username/password), but the skill itself does not ask for or exfiltrate credentials.
The skill does not request always:true and is user-invocable; it does not attempt to modify other skills or system-wide agent settings. Its runtime instructions change local Git state as expected for Git operations, but it does not gain elevated platform privileges.
Guidance
This skill is essentially a published cheat-sheet of Git commands and is coherent with its stated purpose. Before using it: (1) ensure git is installed on the host (the SKILL.md expects the git binary); (2) be cautious with destructive commands (reset --hard, clean -fdx, force-push) — back up important work or operate on clones/branches; (3) be aware git config --global will alter your global Git identity; (4) the skill does not request credentials, but Git operations that contact remotes will use whatever auth is configured on your machine (SSH keys or credential helpers); and (5) there is a small metadata mismatch between the manifest and the SKILL.md regarding required binaries — that's likely benign but worth noting. If you want stricter safety, avoid running destructive commands provided here unless you understand their effects or test in a disposable repo.
Latest Release
v1.0.0
Initial release of git-essentials. - Provides essential Git commands for setup, version control, branching, remote operations, stashing, rebasing, tagging, submodules, and cleaning. - Includes common workflows for feature branches, hotfixes, and syncing forks. - Offers helpful aliases, practical tips, and solutions to common issues. - Links to official Git documentation and resources for further learning.
More by @Arnarsson
Published by @Arnarsson on ClawHub
