Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

coalesce-labs/ci-commit

Name: ci-commit
Author: coalesce-labs

plugins/dev/skills/ci-commit/SKILL.md

npx skillsauth add coalesce-labs/catalyst ci-commit

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

CI Commit

Create git commits autonomously without user interaction. Designed for CI pipelines, automated workflows, and non-interactive contexts.

Key Differences from `/commit`

No user confirmation — commits immediately
No interactive prompts — fully autonomous
Conventional commit format — maintained for consistency
Safety checks — never commits sensitive files or thoughts/

Session Tracking

SESSION_SCRIPT="${CLAUDE_PLUGIN_ROOT}/scripts/catalyst-session.sh"
if [[ -x "$SESSION_SCRIPT" ]]; then
  CATALYST_SESSION_ID=$("$SESSION_SCRIPT" start --skill "ci-commit" \
    --ticket "${TICKET_ID:-}" \
    --workflow "${CATALYST_SESSION_ID:-}")
  export CATALYST_SESSION_ID
fi

Process

1. Analyze Changes

# Check for changes
git status --porcelain
git diff --cached --name-only
git diff --name-only

If no changes exist, end the session and exit silently:

if [[ -n "${CATALYST_SESSION_ID:-}" && -x "$SESSION_SCRIPT" ]]; then
  "$SESSION_SCRIPT" end "$CATALYST_SESSION_ID" --status done
fi

No changes to commit.

2. Safety Filters

NEVER commit these files:

thoughts/ directory (persistent context, managed separately)
.env, .env.* files (secrets)
*.secret, *.key, *.pem files
.claude/ configuration files
Files matching patterns in .gitignore

NEVER commit dummy or test artifacts:

Files named test_*, dummy_*, temp_* in non-test directories
Empty placeholder files

3. Auto-detect Commit Components

Type detection:

Only *.md files in docs/ → docs
Only test files → test
Only package.json, *.lock → build
Only .github/workflows/ → ci
Bug fix context → fix
Otherwise → feat or chore based on context

Scope detection:

Parse changed file paths to determine scope
Use directory-based scoping (e.g., agents, commands, scripts)
Cross-cutting changes → empty scope

Ticket extraction:

Extract from branch name: {PREFIX}-{NUMBER}
Add as Refs: TICKET-123 in footer

4. Generate and Execute Commit

# Stage only safe files
git add [specific files, never -A or .]

# Create commit with conventional format
git commit -m "$(cat <<'EOF'
<type>(<scope>): <summary>

<body explaining what changed and why>

Refs: TICKET-123
EOF
)"

5. Report Result

git log --oneline -n 1
git show --stat HEAD

6. End Session

if [[ -n "${CATALYST_SESSION_ID:-}" && -x "$SESSION_SCRIPT" ]]; then
  "$SESSION_SCRIPT" end "$CATALYST_SESSION_ID" --status done
fi

Important

NEVER add co-author information or Claude attribution
NEVER commit thoughts/ directory
NEVER use git add -A or git add .
NEVER prompt the user — this is fully autonomous
Keep commits atomic and focused
Use conventional commit format for changelog generation

coalesce-labs/ci-commit

plugins/dev/skills/ci-commit/SKILL.md

Create git commits autonomously for CI/automation (no user interaction). Non-interactive variant of /commit for use in CI pipelines, automated workflows, and background tasks. Never prompts the user.

9 stars

tools

Updated Apr 15, 2026

$ install --global

skillsauth

npx skillsauth add coalesce-labs/catalyst ci-commit

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Apr 15, 2026, 4:51 PM5.0s1 file scanned

SKILL.md

name:: ci-commit
description:: Create git commits autonomously for CI/automation (no user interaction). Non-interactive variant of /commit for use in CI pipelines, automated workflows, and background tasks. Never prompts the user.
user-invocable:: false
allowed-tools:: Bash, Read
version:: 1.0.0

CI Commit

Create git commits autonomously without user interaction. Designed for CI pipelines, automated workflows, and non-interactive contexts.

Key Differences from `/commit`

No user confirmation — commits immediately
No interactive prompts — fully autonomous
Conventional commit format — maintained for consistency
Safety checks — never commits sensitive files or thoughts/

Session Tracking

SESSION_SCRIPT="${CLAUDE_PLUGIN_ROOT}/scripts/catalyst-session.sh"
if [[ -x "$SESSION_SCRIPT" ]]; then
  CATALYST_SESSION_ID=$("$SESSION_SCRIPT" start --skill "ci-commit" \
    --ticket "${TICKET_ID:-}" \
    --workflow "${CATALYST_SESSION_ID:-}")
  export CATALYST_SESSION_ID
fi

Process

1. Analyze Changes

# Check for changes
git status --porcelain
git diff --cached --name-only
git diff --name-only

If no changes exist, end the session and exit silently:

if [[ -n "${CATALYST_SESSION_ID:-}" && -x "$SESSION_SCRIPT" ]]; then
  "$SESSION_SCRIPT" end "$CATALYST_SESSION_ID" --status done
fi

No changes to commit.

2. Safety Filters

NEVER commit these files:

thoughts/ directory (persistent context, managed separately)
.env, .env.* files (secrets)
*.secret, *.key, *.pem files
.claude/ configuration files
Files matching patterns in .gitignore

NEVER commit dummy or test artifacts:

Files named test_*, dummy_*, temp_* in non-test directories
Empty placeholder files

3. Auto-detect Commit Components

Type detection:

Only *.md files in docs/ → docs
Only test files → test
Only package.json, *.lock → build
Only .github/workflows/ → ci
Bug fix context → fix
Otherwise → feat or chore based on context

Scope detection:

Parse changed file paths to determine scope
Use directory-based scoping (e.g., agents, commands, scripts)
Cross-cutting changes → empty scope

Ticket extraction:

Extract from branch name: {PREFIX}-{NUMBER}
Add as Refs: TICKET-123 in footer

4. Generate and Execute Commit

# Stage only safe files
git add [specific files, never -A or .]

# Create commit with conventional format
git commit -m "$(cat <<'EOF'
<type>(<scope>): <summary>

<body explaining what changed and why>

Refs: TICKET-123
EOF
)"

5. Report Result

git log --oneline -n 1
git show --stat HEAD

6. End Session

if [[ -n "${CATALYST_SESSION_ID:-}" && -x "$SESSION_SCRIPT" ]]; then
  "$SESSION_SCRIPT" end "$CATALYST_SESSION_ID" --status done
fi

Important

NEVER add co-author information or Claude attribution
NEVER commit thoughts/ directory
NEVER use git add -A or git add .
NEVER prompt the user — this is fully autonomous
Keep commits atomic and focused
Use conventional commit format for changelog generation

Related Skills

coalesce-labs/phase-remediate

testing

VerifiedTrustedCommunity

Phase-agent that fixes a failing verify verdict so the pipeline self-heals instead of stalling to needs-human (CTL-653). Reads `${ORCH_DIR}/workers/<ticket>/verify.json`, fixes the `findings[]` (every severity:"high" plus the regression_risk drivers) directly via Edit/Write, commits the remediation, and emits `phase.remediate.complete.<ticket>`. The scheduler's router then re-dispatches `verify` to re-check (the verify⇄remediate cycle, cap 3). Dispatched as a `claude --bg` job by `phase-agent-dispatch`, which invokes it via slash command — hence `user-invocable: true`.

13SKILL.mdUpdated May 28, 2026

coalesce-labs/phase-remediate

coalesce-labs/phase-verify

development

VerifiedTrustedCommunity

Phase agent for the verify step of the 9-phase orchestrator pipeline (CTL-450). NEW skill — has no canonical wrapper. Runs read-only adversarial verification against the implement-phase diff: tsc, tests, lint, security scan, reward-hacking scan, code review, test coverage, silent-failure hunt. Writes ${ORCH_DIR}/workers/<TICKET>/verify.json then emits phase.verify.complete.<ticket>. Reads phase-implement.json as its prior-phase artifact. NEVER writes application code — only test files allowed. Spawned via phase-agent-dispatch via slash command — hence `user-invocable: true`.

13SKILL.mdUpdated May 18, 2026

coalesce-labs/phase-verify

coalesce-labs/plugins/dev/skills/phase-triage

tools

VerifiedTrustedCommunity

--- name: phase-triage description: Phase agent that triages a Linear ticket — expands acronyms, classifies (feature/bug/docs/refactor/chore), identifies dependencies, estimates scope, writes triage.json, and posts a triage analysis comment to Linear. Triage completion is signaled by that comment plus the local triage.json — there is no `triaged` label. Emits phase.triage.complete.<TICKET> on success and phase.triage.failed.<TICKET> on error. Dispatched by the phase-agent orchestrator (CTL-452)

13SKILL.mdUpdated May 18, 2026

coalesce-labs/plugins/dev/skills/phase-triage

coalesce-labs/phase-review

testing

VerifiedTrustedCommunity

Phase agent for the review step of the 9-phase orchestrator pipeline (CTL-450). Wraps the /review skill (gstack) — explicitly skips /ultrareview per user decision. Reads verify.json from the prior phase, runs /review against the diff, writes ${ORCH_DIR}/workers/<TICKET>/review.json, and creates a remediation commit for any HIGH-severity finding that has a deterministic fix. Emits phase.review.complete.<ticket>. Spawned via phase-agent-dispatch via slash command — hence `user-invocable: true`.

13SKILL.mdUpdated May 18, 2026

coalesce-labs/phase-review

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/coalesce-labs/catalyst.git

# Copy into Claude Code skills folder (global)
cp -r catalyst/plugins/dev/skills/ci-commit ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

coalesce-labs/catalyst

9 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT

Adoption

coalesce-labs/ci-commit

$ install --global

Security Scan Results

SKILL.md

CI Commit

Key Differences from /commit

Session Tracking

Process

1. Analyze Changes

2. Safety Filters

3. Auto-detect Commit Components

4. Generate and Execute Commit

5. Report Result

6. End Session

Important

Related Skills

coalesce-labs/phase-remediate

coalesce-labs/phase-verify

coalesce-labs/plugins/dev/skills/phase-triage

coalesce-labs/phase-review

coalesce-labs/ci-commit

$ install --global

Security Scan Results

SKILL.md

CI Commit

Key Differences from /commit

Session Tracking

Process

1. Analyze Changes

2. Safety Filters

3. Auto-detect Commit Components

4. Generate and Execute Commit

5. Report Result

6. End Session

Important

Related Skills

coalesce-labs/phase-remediate

coalesce-labs/phase-verify

coalesce-labs/plugins/dev/skills/phase-triage

coalesce-labs/phase-review

Key Differences from `/commit`

Key Differences from `/commit`