nijaru/git-history-purge
dot_claude/skills/git-history-purge/SKILL.md
Use when purging sensitive data, large files, or private content from the full git history.
data-ai
Updated Apr 22, 2026
$ install --global
skillsauthnpx skillsauth add nijaru/dotfiles git-history-purgeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 5:08 PM50.0s1 file scanned
SKILL.md
- name:
- git-history-purge
- description:
- Use when purging sensitive data, large files, or private content from the full git history.
- allowed-tools:
- Bash, Read
Git History Purge (Gold Standard)
Core Mandates
- No Half-Measures: Simply deleting a file in a new commit is not a purge. You must wipe the history.
- Sign & Align (Mandatory): Rewriting history destroys signatures and "Committer" dates. You MUST re-sign and align dates to maintain project integrity and "Verified" status.
- Verify Before Push: Always check signatures and dates (git log -n 5 --format=fuller --show-signature) before force-pushing.
Implementation Standards
1. The Purge Sequence
- Backup: Ensure the file/folder you want to keep is backed up or untracked (git rm --cached).
- Scrub: Run git filter-repo --path <path> --invert-paths --force.
- Restore Remote: git remote add origin <url>.
2. The Gold Standard (Re-sign & Fix Dates)
Rewriting history creates a brand-new commit tree. Use this command to re-apply cryptographic signatures while force-syncing committer dates to original author dates. This is CRUCIAL for maintaining "Verified" status and correct GitHub activity history: ```bash git rebase --root --rebase-merges --exec 'GIT_COMMITTER_DATE="$(git log -1 --format=%aI)" git commit --amend --no-edit -n -S' ```
Verification Checklist
| Check | Command | Expected | | :---------------- | :---------------------------- | :------------------------ | | Path Purged | git log --all -- <path> | (Empty) | | Dates Aligned | git log -n 5 --format=fuller | AuthorDate == CommitDate | | Signed | git log -n 5 --show-signature | Valid signature (GPG/SSH) |
Anti-Rationalization
| Excuse | Reality | | :------------------------- | :-------------------------------------------------------------------------------------------- | | "The date doesn't matter." | Seeing 100 commits from "2 minutes ago" on GitHub activity graphs looks suspicious or broken. | | "I don't need to sign." | Losing "Verified" status on the entire project history removes a key layer of trust. | | "Force push is scary." | It is necessary for historical purges. Just verify your work locally before pushing. |
Related Skills
nijaru/second-pass
development
VerifiedTrustedCommunity
Use after completing a bug fix, feature, refactor, or tk task when the first implementation taught enough context to replace it with a simpler, cleaner, or more coherent version before finalizing.
SKILL.mdUpdated Apr 25, 2026
nijaru/zig-expert
development
VerifiedTrustedCommunity
Use when writing, migrating, or reviewing Zig code across recent stable versions (0.14-0.16), especially to correct stale syntax or stdlib, build.zig, allocator, formatting, or runtime API knowledge.
SKILL.mdUpdated Apr 22, 2026
nijaru/writer
documentation
VerifiedTrustedCommunity
Use when reviewing or revising text (prose, docs, commits) to remove AI patterns and improve voice/clarity.
SKILL.mdUpdated Apr 22, 2026
nijaru/twitter
content-media
VerifiedTrustedCommunity
Use when fetching X/Twitter post content by URL, or searching for recent X posts.
SKILL.mdUpdated Apr 22, 2026