{"slug":"addyosmani-git-workflow-and-versioning","name":"git-workflow-and-versioning","description":"Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog.","long_description":"---\nname: git-workflow-and-versioning\ndescription: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog.\n---\n\n# Git Workflow and Versioning\n\n## Overview\n\nGit is your safety net. Treat commits as save points, branches as sandboxes, and history as documentation. With AI agents generating code at high speed, disciplined version control is the mechanism that keeps changes manageable, reviewable, and reversible.\n\n## When to Use\n\nAlways. Every code change flows through git.\n\n## Core Principles\n\n### Trunk-Based Development (Recommended)\n\nKeep `main` always deployable. Work in short-lived feature branches that merge back within 1-3 days. Long-lived development branches are hidden costs — they diverge, create merge conflicts, and delay integration. DORA research consistently shows trunk-based development correlates with high-performing engineering teams.\n\n```\nmain ──●──●──●──●──●──●──●──●──●──  (always deployable)\n        ╲      ╱  ╲    ╱\n         ●──●─╱    ●──╱    ← short-lived feature branches (1-3 days)\n```\n\nThis is the recommended default. Teams using gitflow or long-lived branches can adapt the principles (atomic commits, small changes, descriptive messages) to their branching model — the commit discipline matters more than the specific branching strategy.\n\n- **Dev branches are costs.** Every day a branch lives, it accumulates merge risk.\n- **Release branches are acceptable.** When you need to stabilize a release while main moves forward.\n- **Feature flags > long branches.** Prefer deploying incomplete work behind flags rather than keeping it on a branch for weeks.\n\n### 1. Commit Early, Commit Often\n\nEach successful increment gets its own commit. Don't accumulate large uncommitted changes.\n\n```\nWork pattern:\n  Implement slice → Test → Verify → Commit → Next slice\n\nNot this:\n  Implement everything → Hope it works → Giant commit\n```\n\nCommits are save points. If the next change breaks something, you can revert to the last known-good state instantly.\n\n### 2. Atomic Commits\n\nEach commit does one logical thing:\n\n```\n# Good: Each commit is self-contained\ngit log --oneline\na1b2c3d Add task creation endpoint with validation\nd4e5f6g Add task creation form component\nh7i8j9k Connect form to API and add loading state\nm1n2o3p Add task creation tests (unit + integration)\n\n# Bad: Everything mixed together\ngit log --oneline\nx1y2z3a Add task feature, fix sidebar, update deps, refactor utils\n```\n\n### 3. Descriptive Messages\n\nCommit messages explain the *why*, not just the *what*:\n\n```\n# Good: Explains intent\nfeat: add email validation to registration endpoint\n\nPrevents invalid email formats from reaching the database.\nUses Zod schema validation at the route handler level,\nconsistent with existing validation patterns in auth.ts.\n\n# Bad: Describes what's obvious from the diff\nupdate auth.ts\n```\n\n**Format:**\n```\n<type>: <short description>\n\n<optional body explaining why, not what>\n```\n\n**Types:**\n- `feat` — New feature\n- `fix` — Bug fix\n- `refactor` — Code change that neither fixes a bug nor adds a feature\n- `test` — Adding or updating tests\n- `docs` — Documentation only\n- `chore` — Tooling, dependencies, config\n\n### 4. Keep Concerns Separate\n\nDon't combine formatting changes with behavior changes. Don't combine refactors with features. Each type of change should be a separate commit — and ideally a separate PR:\n\n```\n# Good: Separate concerns\ngit commit -m \"refactor: extract validation logic to shared utility\"\ngit commit -m \"feat: add phone number validation to registration\"\n\n# Bad: Mixed concerns\ngit commit -m \"refactor validation and add phone number field\"\n```\n\n**Separate refactoring from feature work.** A refactoring change and a feature change are two different changes — submit them separately. This makes each change easier to review, revert, and understand in history. Small cleanups (renaming a variable) can be included in a feature commit at reviewer discretion.\n\n### 5. Size Your Changes\n\nTarget ~100 lines per commit/PR. Changes over ~1000 lines should be split. See the splitting strategies in `code-review-and-quality` for how to break down large changes.\n\n```\n~100 lines  → Easy to review, easy to revert\n~300 lines  → Acceptable for a single logical change\n~1000 lines → Split into smaller changes\n```\n\n## Branching Strategy\n\n### Feature Branches\n\n```\nmain (always deployable)\n  │\n  ├── feature/task-creation    ← One feature per branch\n  ├── feature/user-settings    ← Parallel work\n  └── fix/duplicate-tasks      ← Bug fixes\n```\n\n- Branch from `main` (or the team's default branch)\n- Keep branches short-lived (merge within 1-3 days) — long-lived branches are hidden costs\n- Delete branches after merge\n- Prefer feature flags over long-lived branches for incomplete features\n\n### Branch Naming\n\n```\nfeature/<short-description>   → feature/task-creation\nfix/<short-description>       → fix/duplicate-tasks\nchore/<short-description>     → chore/update-deps\nrefactor/<short-description>  → refactor/auth-module\n```\n\n## Working with Worktrees\n\nFor parallel AI agent work, use git worktrees to run multiple branches simultaneously:\n\n```bash\n# Create a worktree for a feature branch\ngit worktree add ../project-feature-a feature/task-creation\ngit worktree add ../project-feature-b feature/user-settings\n\n# Each worktree is a separate directory with its own branch\n# Agents can work in parallel without interfering\nls ../\n  project/              ← main branch\n  project-feature-a/    ← task-creation branch\n  project-feature-b/    ← user-settings branch\n\n# When done, merge and clean up\ngit worktree remove ../project-feature-a\n```\n\nBenefits:\n- Multiple agents can work on different features simultaneously\n- No branch switching needed (each directory has its own branch)\n- If one experiment fails, delete the worktree — nothing is lost\n- Changes are isolated until explicitly merged\n\n## The Save Point Pattern\n\n```\nAgent starts work\n    │\n    ├── Makes a change\n    │   ├── Test passes? → Commit → Continue\n    │   └── Test fails? → Revert to last commit → Investigate\n    │\n    ├── Makes another change\n    │   ├── Test passes? → Commit → Continue\n    │   └── Test fails? → Revert to last commit → Investigate\n    │\n    └── Feature complete → All commits form a clean history\n```\n\nThis pattern means you never lose more than one increment of work. If an agent goes off the rails, `git reset --hard HEAD` takes you back to the last successful state.\n\n## Change Summaries\n\nAfter any modification, provide a structured summary. This makes review easier, documents scope discipline, and surfaces unintended changes:\n\n```\nCHANGES MADE:\n- src/routes/tasks.ts: Added validation middleware to POST endpoint\n- src/lib/validation.ts: Added TaskCreateSchema using Zod\n\nTHINGS I DIDN'T TOUCH (intentionally):\n- src/routes/auth.ts: Has similar validation gap but out of scope\n- src/middleware/error.ts: Error format could be improved (separate task)\n\nPOTENTIAL CONCERNS:\n- The Zod schema is strict — rejects extra fields. Confirm this is desired.\n- Added zod as a dependency (72KB gzipped) — already in package.json\n```\n\nThis pattern catches wrong assumptions early and gives reviewers a clear map of the change. The \"DIDN'T TOUCH\" section is especially important — it shows you exercised scope discipline and didn't go on an unsolicited renovation.\n\n## Pre-Commit Hygiene\n\nBefore every commit:\n\n```bash\n# 1. Check what you're about to commit\ngit diff --staged\n\n# 2. Ensure no secrets\ngit diff --staged | grep -i \"password\\|secret\\|api_key\\|token\"\n\n# 3. Run tests\nnpm test\n\n# 4. Run linting\nnpm run lint\n\n# 5. Run type checking\nnpx tsc --noEmit\n```\n\nAutomate this with git hooks:\n\n```json\n// package.json (using lint-staged + husky)\n{\n  \"lint-staged\": {\n    \"*.{ts,tsx}\": [\"eslint --fix\", \"prettier --write\"],\n    \"*.{json,md}\": [\"prettier --write\"]\n  }\n}\n```\n\n## Handling Generated Files\n\n- **Commit generated files** only if the project expects them (e.g., `package-lock.json`, Prisma migrations)\n- **Don't commit** build output (`dist/`, `.next/`), environment files (`.env`), or IDE config (`.vscode/settings.json` unless shared)\n- **Have a `.gitignore`** that covers: `node_modules/`, `dist/`, `.env`, `.env.local`, `*.pem`\n\n## Using Git for Debugging\n\n```bash\n# Find which commit introduced a bug\ngit bisect start\ngit bisect bad HEAD\ngit bisect good <known-good-commit>\n# Git checkouts midpoints; run your test at each to narrow down\n\n# View what changed recently\ngit log --oneline -20\ngit diff HEAD~5..HEAD -- src/\n\n# Find who last changed a specific line\ngit blame src/services/task.ts\n\n# Search commit messages for a keyword\ngit log --grep=\"validation\" --oneline\n```\n\n## Release & Versioning\n\nCommits are how *you* track change; a **version** is how your *consumers* track it. The moment anything else depends on your code — another team, a published package, a deployed client — \"latest on main\" stops being a sufficient answer to \"what am I running, and is it safe to upgrade?\" A version number and a changelog are the contract that answers it.\n\n### Semantic Versioning\n\nFor anything with consumers, version `MAJOR.MINOR.PATCH` and let the number carry meaning:\n\n```\n  MAJOR  breaking change — consumers must change their code to upgrade\n  MINOR  new functionality, backward-compatible — safe to upgrade\n  PATCH  bug fix, backward-compatible — safe to upgrade\n```\n\nThe number is a promise, so make the code match it. A \"patch\" that changes behavior consumers relied on is a major change wearing a disguise (Hyrum's Law — see the `api-and-interface-design` skill). When unsure whether a change is breaking, assume it is; a surprise major is far cheaper than a broken consumer.\n\n### Tag the release, and let the tag be the source of truth\n\nA release is an immutable point in history, not a moving branch. Tag it so it can always be reproduced:\n\n```bash\ngit tag -a v1.4.0 -m \"Release 1.4.0\"\ngit push origin v1.4.0\n```\n\nDerive the version from the tag rather than hand-editing it in scattered files, so the artifact, the tag, and the changelog can never disagree.\n\n### Keep a changelog written for humans\n\nA changelog is not `git log`. It's the curated, consumer-facing answer to \"what changed and do I care?\" — grouped by `Added / Changed / Fixed / Deprecated / Removed / Security`, newest on top, every entry phrased around user impact, not internal mechanics.\n\n```markdown\n## [1.4.0] - 2025-06-12\n### Added\n- Bulk task import via CSV\n### Fixed\n- Timezone drift in recurring task due dates\n### Deprecated\n- `GET /v1/tasks/all` — use the paginated `GET /v1/tasks` (removal in 2.0)\n```\n\nWrite the entry in the same change that makes the change, while the impact is fresh — not reconstructed from commit archaeology at release time. Breaking changes get a migration note and a deprecation window (follow the `deprecation-and-migration` skill); shipping the actual release is the `shipping-and-launch` skill's job — this section is the versioning contract that feeds it.\n\n## Common Rationalizations\n\n| Rationalization | Reality |\n|---|---|\n| \"I'll commit when the feature is done\" | One giant commit is impossible to review, debug, or revert. Commit each slice. |\n| \"The message doesn't matter\" | Messages are documentation. Future you (and future agents) will need to understand what changed and why. |\n| \"I'll squash it all later\" | Squashing destroys the development narrative. Prefer clean incremental commits from the start. |\n| \"Branches add overhead\" | Short-lived branches are free and prevent conflicting work from colliding. Long-lived branches are the problem — merge within 1-3 days. |\n| \"I'll split this change later\" | Large changes are harder to review, riskier to deploy, and harder to revert. Split before submitting, not after. |\n| \"I don't ","tagline":"Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, ","category":"coding-agents","tags":["agent-skill"],"author":"addyosmani","verified":false,"attribution":{"status":"registry_indexed","statusLabel":"Registry indexed","shortLabel":"REGISTRY INDEXED","sourceLabel":"github fast track","sourceDetail":"addyosmani/agent-skills","creatorName":"addyosmani","creatorUrl":"https://github.com/addyosmani","sourceUrl":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":91373,"forks":9758,"verified_installs":0,"successful_runs":0,"total_outcomes":0,"rating":0,"review_count":0,"quality_score":57.83},"quality":{"score":95,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"91K","tone":"positive"},{"label":"Freshness","value":"8d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"MIT","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v5","score":70,"base_score":78,"outcome_confidence":0,"tier":"review","label":"Sandbox only","summary":"Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.","recommendedAction":"Run only in a sandbox and compare close alternatives before using it for real work.","decision":{"install_policy":"human_review_before_install","auto_install_allowed":false,"human_review_required":true,"sandbox_first":true,"agent_action":"Compare alternatives before installing.","reasoning":["70/100 Trust Score v5","78/100 Trust Score v4 baseline","Needs more real agent outcomes before unattended install","Install path is available","Review before production"],"review_required_when":["The workspace contains production secrets, payments, private customer data, or irreversible actions.","The install command requests shell, network, credential, database, or broad filesystem access.","Outcome evidence is missing, recently failed, or required human review.","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"]},"dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"91K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":100,"weight":0.08,"status":"pass","detail":"91K stars, 9.8K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"8d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":76,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":38,"weight":0.12,"status":"fail","detail":"command execution surface, credential or environment access"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":18,"weight":0.07,"status":"fail","detail":"secrets or environment access, shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"91K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"91K stars, 9.8K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"8d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"fail","label":"Dependency/runtime risk","detail":"command execution surface, credential or environment access"},{"status":"pass","label":"Install availability","detail":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"fail","label":"Permission surface","detail":"secrets or environment access, shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"pass","label":"OpenAgentSkill usage","detail":"4 views, 0 install copies"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern","Outcome loop is ready but needs first real agent run"],"warnings":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution","No real agent outcome reports yet","Human review required before unattended installation"],"evidence":{"stars":"91K GitHub stars","repoActivity":"91K stars, 9.8K forks","lastPushed":"8d since push","license":"MIT","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","install":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet","agentProvenScore":0,"outcomeConfidence":"0%","installPolicy":"human_review_before_install"},"installReadiness":{"ready":true,"command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","8d since push","Trust Score v5 requires review or sandbox-only use before install."]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Compare alternatives before installing."},"outcome_loop":{"version":"openagentskill-agent-outcome-v4","required_after_install":true,"endpoint":"/api/agent/outcome","method":"POST","event_id_source":"feedback.event_id, install_receipt.resolve_event_id, or decision_packet.outcome_feedback.event_id","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"required_fields":["event_id","skill_slug","task"],"quality_fields":["task_success","output_quality","error_type","human_review_required","used_in_production","workspace","evidence_url","time_to_useful_ms","source_version"],"ranking_inputs_updated":["Trust Score v5 outcome confidence","Agent Proven Score","Resolve ranking task-fit evidence","Skill detail machine-readable metadata","Outcome leaderboard"]},"agent_contract":{"suited_tasks":["coding-agents","agent-skill"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"install_command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","trust_score":70,"trust_version":"trust-score-v5","risk_level":"medium","do_not_use_when":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"before_install":["Read the audit page and machine-readable metadata.","Confirm the install command, license, and permission surface fit the workspace.","Get explicit human approval or choose an alternative before installing."],"after_run":["Report the outcome to /api/agent/outcome using the resolve event id.","Include output_quality, workspace, human_review_required, and evidence_url when available.","Re-resolve before broad production rollout."]},"bestFor":["coding-agents","agent-skill"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"backward_compatible":{"trust_score_v4":{"version":"trust-score-v4","score":78,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout."}}},"trust_score_v5":{"version":"trust-score-v5","score":70,"base_score":78,"outcome_confidence":0,"tier":"review","label":"Sandbox only","summary":"Useful candidate with missing or mixed trust signals. Keep it in an isolated workspace until the outcome loop proves task fit.","recommendedAction":"Run only in a sandbox and compare close alternatives before using it for real work.","decision":{"install_policy":"human_review_before_install","auto_install_allowed":false,"human_review_required":true,"sandbox_first":true,"agent_action":"Compare alternatives before installing.","reasoning":["70/100 Trust Score v5","78/100 Trust Score v4 baseline","Needs more real agent outcomes before unattended install","Install path is available","Review before production"],"review_required_when":["The workspace contains production secrets, payments, private customer data, or irreversible actions.","The install command requests shell, network, credential, database, or broad filesystem access.","Outcome evidence is missing, recently failed, or required human review.","Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"]},"dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"91K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":100,"weight":0.08,"status":"pass","detail":"91K stars, 9.8K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"8d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":76,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":38,"weight":0.12,"status":"fail","detail":"command execution surface, credential or environment access"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":18,"weight":0.07,"status":"fail","detail":"secrets or environment access, shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"91K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"91K stars, 9.8K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"8d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"fail","label":"Dependency/runtime risk","detail":"command execution surface, credential or environment access"},{"status":"pass","label":"Install availability","detail":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"fail","label":"Permission surface","detail":"secrets or environment access, shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"pass","label":"OpenAgentSkill usage","detail":"4 views, 0 install copies"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern","Outcome loop is ready but needs first real agent run"],"warnings":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution","No real agent outcome reports yet","Human review required before unattended installation"],"evidence":{"stars":"91K GitHub stars","repoActivity":"91K stars, 9.8K forks","lastPushed":"8d since push","license":"MIT","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","install":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet","agentProvenScore":0,"outcomeConfidence":"0%","installPolicy":"human_review_before_install"},"installReadiness":{"ready":true,"command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","8d since push","Trust Score v5 requires review or sandbox-only use before install."]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Compare alternatives before installing."},"outcome_loop":{"version":"openagentskill-agent-outcome-v4","required_after_install":true,"endpoint":"/api/agent/outcome","method":"POST","event_id_source":"feedback.event_id, install_receipt.resolve_event_id, or decision_packet.outcome_feedback.event_id","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"required_fields":["event_id","skill_slug","task"],"quality_fields":["task_success","output_quality","error_type","human_review_required","used_in_production","workspace","evidence_url","time_to_useful_ms","source_version"],"ranking_inputs_updated":["Trust Score v5 outcome confidence","Agent Proven Score","Resolve ranking task-fit evidence","Skill detail machine-readable metadata","Outcome leaderboard"]},"agent_contract":{"suited_tasks":["coding-agents","agent-skill"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"install_command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","trust_score":70,"trust_version":"trust-score-v5","risk_level":"medium","do_not_use_when":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"before_install":["Read the audit page and machine-readable metadata.","Confirm the install command, license, and permission surface fit the workspace.","Get explicit human approval or choose an alternative before installing."],"after_run":["Report the outcome to /api/agent/outcome using the resolve event id.","Include output_quality, workspace, human_review_required, and evidence_url when available.","Re-resolve before broad production rollout."]},"bestFor":["coding-agents","agent-skill"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"backward_compatible":{"trust_score_v4":{"version":"trust-score-v4","score":78,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout."}}},"trust_score_v4":{"version":"trust-score-v4","score":78,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":100,"weight":0.13,"status":"pass","detail":"91K GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":100,"weight":0.08,"status":"pass","detail":"91K stars, 9.8K forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"8d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"MIT"},{"id":"documentation","label":"README/SKILL.md completeness","score":76,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":38,"weight":0.12,"status":"fail","detail":"command execution surface, credential or environment access"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"},{"id":"install_safety","label":"Install command safety","score":92,"weight":0.1,"status":"pass","detail":"standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":18,"weight":0.07,"status":"fail","detail":"secrets or environment access, shell or command execution"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"},{"id":"agent_outcomes","label":"Agent Proven outcomes","score":54,"weight":0.13,"status":"info","detail":"No agent outcome data yet"}],"checks":[{"status":"pass","label":"GitHub adoption","detail":"91K GitHub stars"},{"status":"pass","label":"Stars/forks activity","detail":"91K stars, 9.8K forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"8d since push"},{"status":"pass","label":"License clarity","detail":"MIT"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"fail","label":"Dependency/runtime risk","detail":"command execution surface, credential or environment access"},{"status":"pass","label":"Install availability","detail":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"},{"status":"pass","label":"Install command safety","detail":"standard package or runtime install path"},{"status":"fail","label":"Permission surface","detail":"secrets or environment access, shell or command execution"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"info","label":"Agent Proven outcomes","detail":"No agent outcome data yet"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"pass","label":"OpenAgentSkill usage","detail":"4 views, 0 install copies"},{"status":"info","label":"Agent outcomes","detail":"No agent outcome data yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Large GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"evidence":{"stars":"91K GitHub stars","repoActivity":"91K stars, 9.8K forks","lastPushed":"8d since push","license":"MIT","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","install":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"installReadiness":{"ready":true,"command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","No Agent Proven outcome evidence yet","8d since push"]},"agentCompatibility":["Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"outcomeEvidence":{"total":0,"successes":0,"failures":0,"notRelevant":0,"successRate":null,"installAttempts":0,"riskBlocked":0,"setupRequired":0,"installSuccessRate":null,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"recentSuccessRate":null,"recentFailureRate":null,"uniqueAgents":0,"agentProvenScore":0,"agentProvenLabel":"Needs first agent run","lastOutcomeAt":null,"label":"No agent outcome data yet"},"autoInstall":{"allowed":false,"sandboxRequired":true,"policy":"human_review_before_install","reason":"Human review or sandbox validation is required before automatic installation."},"bestFor":["coding-agents","agent-skill"],"doNotUseFor":["Production credentials, payments, or irreversible account changes without explicit human review","Sensitive private data before reviewing repository code, license, and permission surface","Automatic installation in a production workspace"],"knownRisks":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"outcome_stats":null,"safety":{"score":39,"level":"avoid_auto_install","label":"Avoid automatic install","safety_tier":{"tier":"experimental","label":"Experimental","badge":"EXPERIMENTAL","summary":"Sparse or mixed signals. Useful for discovery, but not for autonomous installation.","recommended_action":"Test manually in an isolated workspace and compare against safer alternatives.","auto_install_policy":"review","reasons":["Metadata combines secrets access with shell or command execution","High-risk permission hints: Shell or command execution, Secrets or environment access","39/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"needs_review","permission_hints":[{"id":"shell","label":"Shell or command execution","reason":"Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.","severity":"high"},{"id":"browser","label":"Browser automation","reason":"Skill may drive a browser or interact with web pages.","severity":"medium"},{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"},{"id":"secrets","label":"Secrets or environment access","reason":"Skill metadata references credentials, tokens, environment variables, or secret-bearing workflows.","severity":"high"},{"id":"database","label":"Database access","reason":"Skill may inspect schemas, query databases, or work with persistent stores.","severity":"medium"}],"policy_warnings":["High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"experimental","label":"Experimental","badge":"EXPERIMENTAL","auto_install_policy":"review","auto_install_allowed":false,"blocked":false,"human_review_required":true,"recommended_action":"Test manually in an isolated workspace and compare against safer alternatives.","reasons":["Metadata combines secrets access with shell or command execution","High-risk permission hints: Shell or command execution, Secrets or environment access","39/100 agent safety score"]},"eval":{"version":"openagentskill-skill-eval-v1","status":"failed","score":77,"risk_level":"high","decision":{"recommendation":"do_not_auto_install","reason":"Permission surface: secrets or environment access, shell or command execution","auto_install_allowed":false,"policy":"block","human_review_required":true},"blockers":["Permission surface: secrets or environment access, shell or command execution"],"warnings":["Trust score: Good trust signals with a few areas worth checking before rollout.","Audit score: Needs review","Agent safety gate: Sparse or mixed signals. Useful for discovery, but not for autonomous installation.","README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context","High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"],"validation_plan":["Inspect repository, README/SKILL.md, license, and recent commits before production use.","Install in an isolated workspace or sandbox with no production secrets available.","Run the smallest representative task and record files touched, commands run, network access, and outputs.","Compare the selected skill against at least one alternative when the eval status is review or failed.","Promote only after the agent reports a successful verification result and unresolved warnings are accepted."],"checks":[{"id":"task_fit","label":"Task fit","status":"pass","score":94,"required_for_auto_install":true,"detail":"Task wording matches this skill metadata.","evidence":["Evaluate git-workflow-and-versioning before installing it in an agent workflow","coding-agents","GitHub automation workflows; Claude Code teams; teams that value GitHub adoption signals"]},{"id":"install_path","label":"Install path","status":"pass","score":92,"required_for_auto_install":true,"detail":"Install handoff is available.","evidence":["npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"]},{"id":"install_safety","label":"Install command safety","status":"pass","score":92,"required_for_auto_install":true,"detail":"standard package or runtime install path","evidence":["npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning"]},{"id":"trust_score","label":"Trust score","status":"warn","score":78,"required_for_auto_install":true,"detail":"Good trust signals with a few areas worth checking before rollout.","evidence":["Strong shortlist","91K GitHub stars","MIT"]},{"id":"audit_score","label":"Audit score","status":"warn","score":87,"required_for_auto_install":true,"detail":"Needs review","evidence":["Dependency or permission surface needs review"]},{"id":"agent_safety_gate","label":"Agent safety gate","status":"warn","score":39,"required_for_auto_install":true,"detail":"Sparse or mixed signals. Useful for discovery, but not for autonomous installation.","evidence":["Test manually in an isolated workspace and compare against safer alternatives.","Metadata combines secrets access with shell or command execution"]},{"id":"readme_skillmd_completeness","label":"README/SKILL.md completeness","status":"warn","score":76,"required_for_auto_install":false,"detail":"Public metadata needs stronger README/SKILL.md context","evidence":["Usable metadata, review docs"]},{"id":"license_clarity","label":"License clarity","status":"pass","score":86,"required_for_auto_install":true,"detail":"MIT","evidence":["MIT"]},{"id":"recent_maintenance","label":"Recent maintenance","status":"pass","score":100,"required_for_auto_install":false,"detail":"8d since push","evidence":["8d since push"]},{"id":"permission_surface","label":"Permission surface","status":"fail","score":18,"required_for_auto_install":true,"detail":"secrets or environment access, shell or command execution","evidence":["Shell or command execution: high","Browser automation: medium","Network access: medium"]},{"id":"alternatives","label":"Alternatives available","status":"info","score":55,"required_for_auto_install":false,"detail":"No close alternatives were found in the current shortlist.","evidence":[]}],"endpoints":{"web":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning/evals","api":"/api/agent/evals?slug=addyosmani-git-workflow-and-versioning","text":"/api/agent/evals?slug=addyosmani-git-workflow-and-versioning&format=text"}},"agent_readable_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"addyosmani-git-workflow-and-versioning","name":"git-workflow-and-versioning","description":"Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog.","category":"coding-agents","url":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","github_repo":"addyosmani/agent-skills"},"suited_tasks":["GitHub automation workflows","Claude Code teams","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Move data between tools","Transform files"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add addyosmani-git-workflow-and-versioning"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"git-workflow-and-versioning\" agent skill from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"git-workflow-and-versioning\" as a Claude Code skill from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"git-workflow-and-versioning\" from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/addyosmani-git-workflow-and-versioning/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/addyosmani-git-workflow-and-versioning"},"trust":{"score":78,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"91K GitHub stars","repoActivity":"91K stars, 9.8K forks","lastPushed":"8d since push","license":"MIT","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","install":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["coding-agents","agent-skill"],"known_risks":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":87,"risk_level":"needs_review","risk_label":"Needs review","warnings":["Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"safety_gate":{"tier":"experimental","label":"Experimental","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Test manually in an isolated workspace and compare against safer alternatives."},"quality":{"score":95,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"8d since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No major risk signals from current metadata","High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access"],"agent_contract":{"task_input":"Use git-workflow-and-versioning in an agent workflow","recommended_action":"Test manually in an isolated workspace and compare against safer alternatives.","install_policy":"review","minimum_review_before_use":["Trust: 78/100 Strong shortlist","Audit: 87/100 Needs review","Safety: 39/100 Avoid automatic install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"addyosmani-git-workflow-and-versioning (git-workflow-and-versioning)","install_command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","risk_summary":"Needs review; Experimental; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"addyosmani-git-workflow-and-versioning","task":"Use git-workflow-and-versioning in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning","api":"https://www.openagentskill.com/api/agent/skills/addyosmani-git-workflow-and-versioning","audit":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=addyosmani-git-workflow-and-versioning&task=Use%20git-workflow-and-versioning%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20git-workflow-and-versioning%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20git-workflow-and-versioning%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/addyosmani-git-workflow-and-versioning/install","manifest":"https://www.openagentskill.com/api/registry/manifest/addyosmani-git-workflow-and-versioning"}},"machine_metadata":{"version":"openagentskill-agent-metadata-v2","skill":{"slug":"addyosmani-git-workflow-and-versioning","name":"git-workflow-and-versioning","description":"Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog.","category":"coding-agents","url":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","github_repo":"addyosmani/agent-skills"},"suited_tasks":["GitHub automation workflows","Claude Code teams","teams that value GitHub adoption signals","Inspect repository metadata","Compare code changes","Write concise engineering summaries","Move data between tools","Transform files"],"suited_agents":["Codex","Claude Code","Cursor","OpenAgentSkill CLI","CLI"],"install":{"command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","ready":true,"targets":[{"id":"openagentskill-cli","label":"CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add addyosmani-git-workflow-and-versioning"},{"id":"codex","label":"Codex","kind":"agent-prompt","value":"Install the \"git-workflow-and-versioning\" agent skill from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"claude-code","label":"Claude Code","kind":"agent-prompt","value":"Add \"git-workflow-and-versioning\" as a Claude Code skill from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."},{"id":"cursor","label":"Cursor","kind":"agent-prompt","value":"Turn \"git-workflow-and-versioning\" from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes."}],"handoff_url":"https://www.openagentskill.com/api/skills/addyosmani-git-workflow-and-versioning/install","manifest_url":"https://www.openagentskill.com/api/registry/manifest/addyosmani-git-workflow-and-versioning"},"trust":{"score":78,"label":"Strong shortlist","version":"trust-score-v4","install_policy":"human_review_before_install","evidence":{"stars":"91K GitHub stars","repoActivity":"91K stars, 9.8K forks","lastPushed":"8d since push","license":"MIT","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","install":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","installSafety":"standard package or runtime install path","permissionSurface":"secrets or environment access, shell or command execution","documentation":"Usable metadata, review docs","agentOutcomes":"No agent outcome data yet"},"outcome_evidence":{"total":0,"successes":0,"failures":0,"not_relevant":0,"success_rate":null,"recent_success_rate":null,"recent_failure_rate":null,"install_attempts":0,"install_success_rate":null,"risk_blocked":0,"setup_required":0,"avg_output_quality":null,"production_outcomes":0,"last_outcome_at":null,"label":"No agent outcome data yet"},"auto_install":{"allowed":false,"sandbox_required":true,"reason":"Human review or sandbox validation is required before automatic installation."},"best_for":["coding-agents","agent-skill"],"known_risks":["Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"agent_proven":{"version":"agent-proven-v1","score":0,"tier":"unproven","label":"Needs first agent run","summary":"No agent outcome reports yet. Use Resolve, run one narrow sandbox task, then report the result.","metrics":{"totalOutcomes":0,"successfulOutcomes":0,"failedOutcomes":0,"installAttempts":0,"installSuccessRate":null,"successRate":null,"recentSuccessRate":null,"recentFailureRate":null,"riskBlocked":0,"setupRequired":0,"notRelevant":0,"avgOutputQuality":null,"avgTimeToUsefulMs":null,"productionOutcomes":0,"humanReviewRequired":0,"uniqueAgents":0,"lastOutcomeAt":null},"signals":[],"penalties":["No real agent outcome evidence yet"]},"audit":{"score":87,"risk_level":"needs_review","risk_label":"Needs review","warnings":["Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"safety_gate":{"tier":"experimental","label":"Experimental","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Test manually in an isolated workspace and compare against safer alternatives."},"quality":{"score":95,"label":"Excellent"},"supply":{"track":"Coding and developer agents","scenario":"GitHub automation","maintenance":"8d since push","risk":"Needs review"},"alternative_skills":[],"do_not_use_when":["teams that need a vendor-supported SLA","high-compliance environments without internal security review","No major risk signals from current metadata","High-risk permission hints: Shell or command execution, Secrets or environment access","Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access"],"agent_contract":{"task_input":"Use git-workflow-and-versioning in an agent workflow","recommended_action":"Test manually in an isolated workspace and compare against safer alternatives.","install_policy":"review","minimum_review_before_use":["Trust: 78/100 Strong shortlist","Audit: 87/100 Needs review","Safety: 39/100 Avoid automatic install","Review repository, license, install command, and permission surface before production use."],"expected_agent_output":{"selected_skill":"addyosmani-git-workflow-and-versioning (git-workflow-and-versioning)","install_command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","risk_summary":"Needs review; Experimental; Review before production","verification_result":"Report the smallest successful task, files touched, warnings, and any missing setup."}},"outcome_feedback":{"endpoint":"https://www.openagentskill.com/api/agent/outcome","method":"POST","requires_resolve_event_id":true,"event_id_source":"Use install_receipt.outcome_feedback.event_id or feedback.event_id returned by /api/agent/resolve for the current task.","expected_outcomes":["success","failed","not_relevant","blocked_by_risk","setup_required"],"payload_template":{"event_id":"<install_receipt.outcome_feedback.event_id or feedback.event_id from /api/agent/resolve>","skill_slug":"addyosmani-git-workflow-and-versioning","task":"Use git-workflow-and-versioning in an agent workflow","agent":"codex","outcome":"success","install_used":true,"risk_blocked":false,"setup_required":false,"task_success":true,"output_quality":4,"error_type":null,"human_review_required":false,"workspace":"sandbox","time_to_useful_ms":120000,"notes":"Report the smallest successful task, setup friction, files touched, and risk notes."}},"endpoints":{"web":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning","api":"https://www.openagentskill.com/api/agent/skills/addyosmani-git-workflow-and-versioning","audit":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning/audit","eval":"https://www.openagentskill.com/api/agent/evals?slug=addyosmani-git-workflow-and-versioning&task=Use%20git-workflow-and-versioning%20in%20an%20agent%20workflow&max_risk=medium","resolve":"https://www.openagentskill.com/api/agent/resolve?task=Use%20git-workflow-and-versioning%20in%20an%20agent%20workflow&agent=codex&max_risk=medium","receipt":"https://www.openagentskill.com/api/agent/receipt?task=Use%20git-workflow-and-versioning%20in%20an%20agent%20workflow&agent=codex&max_risk=medium&format=text","install":"https://www.openagentskill.com/api/skills/addyosmani-git-workflow-and-versioning/install","manifest":"https://www.openagentskill.com/api/registry/manifest/addyosmani-git-workflow-and-versioning"}},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"workflow-automation","title":"Workflow automation"},{"slug":"coding-agents","title":"Coding agents"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor"],"install":{"ready":true,"command":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":91373,"starsLabel":"91K","forks":9758,"license":"MIT","qualityScore":95,"trustScore":78,"auditScore":87},"maintenance":{"status":"fresh","label":"8d since push","daysSincePush":8,"lastPushedAt":"2026-08-28T23:31:50+00:00"},"risk":{"level":"needs_review","label":"Needs review","requiresReview":true,"notes":["Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"coverageTags":["Coding","GitHub automation","coding-agents","agent-skill"]},"audit":{"audit_score":87,"risk_level":"needs_review","risk_label":"Needs review","quality_score":95,"trust_score":78,"maintenance_score":100,"security_score":75,"install_score":92,"warnings":["Dependency or permission surface needs review","Permission surface may require sandboxing","Permission surface needs review: secrets or environment access, shell or command execution","Dependency/runtime risk: command execution surface, credential or environment access","Permission surface: secrets or environment access, shell or command execution"]},"quality_signals":{"model":"v2","star_score":34.73,"usage_score":0,"review_score":5.1,"metadata_score":3,"freshness_score":15},"platforms":["Claude Code"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"workflow-automation","title":"Workflow automation","url":"https://www.openagentskill.com/use-cases/workflow-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"document-processing","title":"Document processing","url":"https://www.openagentskill.com/use-cases/document-processing"}],"stacks":[{"slug":"coding-review-agent","title":"Coding review agent","url":"https://www.openagentskill.com/collections/coding-review-agent"},{"slug":"content-growth-agent","title":"Content growth agent","url":"https://www.openagentskill.com/collections/content-growth-agent"},{"slug":"research-report-agent","title":"Research report agent","url":"https://www.openagentskill.com/collections/research-report-agent"}],"install":"npx skills add addyosmani/agent-skills --skill git-workflow-and-versioning","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx --yes https://github.com/Leon-Drq/openagentskill/releases/download/cli-v0.3.0/openagentskill-0.3.0.tgz add addyosmani-git-workflow-and-versioning","description":"Resolve policy, run the source installer safely, and report a verified install receipt.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"git-workflow-and-versioning\" agent skill from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"codex\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"git-workflow-and-versioning\" as a Claude Code skill from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"claude-code\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"git-workflow-and-versioning\" from https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, opening or reviewing a pull request (PR), pushing to a remote, or when you need to organize work across multiple parallel streams. Use when cutting a release, choosing a semantic version bump, tagging, or writing a changelog. After the install attempt, report the result to https://www.openagentskill.com/api/agent/outcome with POST JSON {\"event_id\":\"install_<unique-id>\",\"skill_slug\":\"addyosmani-git-workflow-and-versioning\",\"task\":\"Install git-workflow-and-versioning\",\"agent\":\"cursor\",\"outcome\":\"success\",\"install_used\":true}. Replace event_id with a unique value and outcome with success or failed. Report success only after the skill is installed and a minimal verification passes.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","github_repo":"addyosmani/agent-skills","version":"1.0.0","license":"MIT","urls":{"web":"https://www.openagentskill.com/skills/addyosmani-git-workflow-and-versioning","repository":"https://github.com/addyosmani/agent-skills/tree/main/skills/git-workflow-and-versioning","api":"/api/agent/skills/addyosmani-git-workflow-and-versioning","install_api":"/api/skills/addyosmani-git-workflow-and-versioning/install"},"meta":{"created_at":"2026-09-01T14:40:42.721469+00:00","updated_at":"2026-09-01T14:40:42.938126+00:00","agent_friendly":true}}