RahmanBhuiyan/.claude/skills/commit
.claude/skills/commit/SKILL.md
Stage relevant files and create a commit following Documents/Process/GitWorkFlow.md format. Auto-detects [BIZ-QC-NEEDED] requirement and prompts for sign-off note when applicable.
development
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add RahmanBhuiyan/monthly-budget-planning-rd .claude/skills/commitInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 2:35 PM23.1s1 file scanned
SKILL.md
- description:
- Stage relevant files and create a commit following Documents/Process/GitWorkFlow.md format. Auto-detects [BIZ-QC-NEEDED] requirement and prompts for sign-off note when applicable.
- allowed-tools:
- Bash, Read, Grep
You are creating a commit for the current branch's work.
Pre-flight (read CLAUDE.md governance)
Before doing anything:
- Run
git branch --show-current. If the branch ismasterormain, stop — the PreToolUse hook will block the commit anyway. Branch off first. - Run
git statusandgit diffto see what's changed. - Run
git log --oneline -5to see recent commit message style.
Stage selectively
Per Documents/Process/CodeCommunityStandard.md and CLAUDE.md "Forbidden by default":
- Never
git add -Aorgit add .— they sweep up unrelated changes. - Stage files by name, only those that belong to this commit.
- Never stage:
.env,*.db,*.sqlite3, anything matching.gitignore. - If you see uncommitted changes that are NOT yours (predate the session), leave them. Surface them to the user instead.
Detect protected-logic changes
If the diff touches any of:
backend/routes/budget.pybackend/routes/reports.pybackend/routes/expenses.pybackend/models.py
…this is a [BIZ-QC-NEEDED] change per CLAUDE.md Rule 2. The commit body MUST include [BIZ-QC-NEEDED] AND should reference product-owner sign-off (Documents/Process/RACI.md W3). If sign-off is absent, prompt the user before committing.
Build the commit message
Format from Documents/Process/GitWorkFlow.md §4:
type(scope): short imperative title
<body — explain the *why*, not the *what*. Bullet points OK.>
[BIZ-QC-NEEDED] ← only if the diff touches protected files
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Allowed types: feat, fix, hotfix, refactor, test, docs, chore, style, perf
Allowed scopes: auth, income, budget, expenses, dashboard, reports, alerts, summary, api, ui, infra, governance
Pick the type from what the diff actually does:
- New feature →
feat - Bug fix →
fix(orhotfixif production-down) - Refactor with no behavior change →
refactor - Test additions →
test - Doc-only →
docs - Tooling, dependencies, infra →
chore
Forbidden
git push --force(any branch)git commit --no-verifygit commit --amendon commits that have been pushed- Skipping pre-commit hooks
- Pushing without explicit user request
Commit
Use a HEREDOC so the message format survives shell quoting:
git commit -m "$(cat <<'EOF'
type(scope): title
Body explaining why.
[BIZ-QC-NEEDED]
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
EOF
)"
After commit, run git status to confirm a clean tree (or surface what's intentionally left).
Push
Do not push unless the user explicitly asks. Even then, never to master directly — push the current feature branch.
Related Skills
RahmanBhuiyan/.claude/skills/weekly
development
VerifiedTrustedCommunity
Generate a weekly summary of commits on master — categorized highlights, statistics, and draft email/standup notes. Useful for sprint retros and release notes.
SKILL.mdUpdated Apr 16, 2026
RahmanBhuiyan/.claude/skills/update-docs
development
VerifiedTrustedCommunity
Read recent code changes and update the affected docs under Documents/. Documents the *current* state, not history. Use after a feature lands or when docs have drifted.
SKILL.mdUpdated Apr 16, 2026
RahmanBhuiyan/.claude/skills/statusline-setup
testing
VerifiedTrustedCommunity
# Statusline Setup — Smart Expense & Budget Tracker A two-row statusline tailored for this project's SDLC workflow. Adapted from [fotoflo/claude-skills](https://github.com/fotoflo/claude-skills/tree/main/statusline-setup). ## What you see **Row 1 — project context** ``` ~/project/monthly-budget-planning-rd (feature/audit-deep-read) [opus] session-name #BUG-1 [BIZ-QC ✓] ``` | Element | Meaning | |---------|---------| | `~/project/...` (green) | Current working directory | | `(branch)` (c
SKILL.mdUpdated Apr 16, 2026
RahmanBhuiyan/.claude/skills/release-preflight
development
VerifiedTrustedCommunity
Run the pre-flight checklist from Documents/DevOps/ReleaseRunbook.md before cutting a release. Reports PASS or BLOCKED with specific reasons.
SKILL.mdUpdated Apr 16, 2026