steelmorgan/git-workflow
framework_eng/rules/git-workflow/SKILL.md
Apply git workflow guardrails before commit/delete
$ install --global
skillsauthnpx skillsauth add steelmorgan/1c-agent-based-dev-framework git-workflowInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 30, 2026, 5:40 AM166.1s1 file scanned
SKILL.md
- name:
- git-workflow
- description:
- Apply git workflow guardrails before commit/delete
- alwaysApply:
- true
Git Workflow Policy
Trigger: work with git (commits, branches, merge tasks, rollback). When triggered, apply the
git-workflowskill (framework/skills/agent-process/git-workflow/SKILL.md): branch strategy, phase-based commit format, squash-merge, rollback.
The guardrail below must always be visible, regardless of whether the skill is loaded or not.
MUST (invariant, always)
| Prohibition / rule | Description |
|---|---|
| Subagents DO NOT commit | The git commit right belongs ONLY to the orchestrator (within the task and the final merge) and to the user. A subagent does not see the full phase scope and may commit garbage. |
| Commit and merge are only for the orchestrator / user | No subagent initiates a commit or merge on its own. |
| Prohibition on deleting files from git without explicit user permission | git rm, git rm --cached, physical deletion of a file under git control with inclusion in the commit, git reset --hard with loss of someone else's changes are PROHIBITED without an explicit "yes, delete it" in the current dialogue. Permissions from memory / CLAUDE.md do NOT count. Instead of deleting, comment out via //--agent, overwrite with a new version, escalate. Never delete the tasks/<TASK-XXX>/ folder. |
| No force-push or destructive operations in the parent branch | Within the local task branch, rebase/amend are allowed; in the parent branch, they are not. |
| Suspicion of deletion -> stop | D <path> or R <old> -> <new> in git status not explicitly initiated by the current phase -> DO NOT commit, record SUSPECTED_DELETION: <path> in orchestrator-context.md, escalate to the user. |
Details of the "how" (creating a task branch, what to commit, message format, conditions and command for squash-merge, rollback scenarios, exceptions for deletion) are in the git-workflow skill.
depends_on:
- framework/skills/agent-process/git-workflow/SKILL.md
- agent-code-marking
- framework/rules/agent-context-protocol/SKILL.md
- framework/rules/protected-paths/SKILL.md
Related Skills
steelmorgan/onec-server-maintenance-hooks
development
VerifiedTrustedCommunity
1C server maintenance webhooks: container restart and external component cache cleanup
83SKILL.mdUpdated Jul 4, 2026
steelmorgan/dap-bsl-code-debug-procedure
development
VerifiedTrustedCommunity
Interactive DAP debugging of a single BSL procedure
83SKILL.mdUpdated Jul 4, 2026
steelmorgan/rlm-bsl-search
tools
VerifiedTrustedCommunity
Rules for using RLM tools for project search and navigation in 1C/BSL
83SKILL.mdUpdated Jul 4, 2026
steelmorgan/winow
development
VerifiedTrustedCommunity
Creates web applications and routes on Winow (a web server on OneScript and Autumn). Use when working with a web server on OneScript, routing, or Winow controllers.
83SKILL.mdUpdated Jul 4, 2026