git-operations

git-operations is a skill for Claude Code, Codex from BuildrAI/Buildr. It costs 105 tokens per session (2,098 once invoked), scanned A, original, MIT.

A tool for carrying out one Git operation that has already been selected, such as fetch, rebase, commit, push, or commit and push. Git is the system that records code history and shares it with remote repositories.

In plain words
What is it for?
Use it for an explicitly scoped Git action during direct repository work or formal task delivery, with a result record showing what happened.
Why use it?
It checks the exact repository, references, files, and allowed effects before changing local files, history, or a remote branch.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/buildrai/buildr/git-operations
Any agent
npx skills add BuildrAI/Buildr --skill git-operations
Clone the repo
git clone --depth 1 https://github.com/BuildrAI/Buildr

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for git-operations

README.md
[![agentmods](https://agentmods.dev/badge/skills/buildrai/buildr/git-operations.svg)](https://agentmods.dev/skills/buildrai/buildr/git-operations)
Your own site
<a href="https://agentmods.dev/skills/buildrai/buildr/git-operations"><img src="https://agentmods.dev/badge/skills/buildrai/buildr/git-operations.svg" alt="Measured on agentmods" height="20"></a>
Per session 105 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,098 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00105 $0.02098
Opus 5 $0.00053 $0.01049
Sonnet 5 $0.00021 $0.00420
Haiku 4.5 $0.00011 $0.00210

Measured today against content hash 8384c1b3dad5, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

git-operations scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

projects/product/services/buildr/resources/workspace/skills/buildr/git-operations/SKILL.md · 101 lines

How it starts

The opening of the file, as written. The whole thing — 101 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Git Operations

本 Skill 是 buildr.git-operations/v1 的默认 provider。它只帮助 Agent 安全执行 consumer 已经选定的一次 Git Operation;不讲解完整 Git 命令集,不选择交付目标或顺序,不拥有 Task Development、Candidate、Verification、Task Finish 或 workspace sync 状态。

能力名称使用复数 Git Operations;一次具体动作称为一个 Git Operation

1. 先取得完整调用边界

写入前必须明确并核验:

  • 实际 repository;
  • 本次 operation;
  • 相关 source/local ref,以及远端动作适用时的 remote 与 destination ref;
  • 精确 owned paths/hunks 或已授权 commit scope;
  • 获准改变 working tree、local history 和 remote 的具体 effects。

直接用户指令、Task Finish Skill或其他上游Agent/consumer可以提供这些输入。Agent拥有交付策略、动作、目标和顺序;Buildr自动Finish只是可选consumer,不是唯一授权来源。不得沿用历史轮次的写入授权,也不得自行补选repository、ref、remote或策略。任何输入与当前事实不一致时,在零Git写入状态返回blocked

2. 保持 operation 单一

  • fetch:只更新 consumer 明确提供的 remote/ref,不改变 working tree 或 local branch history。
  • rebase:只把 consumer 明确提供的 clean local branch rebase 到已核验 target ref,不隐含 push、merge、stash 或其他 branch/remote 选择。
  • commit:只创建或安全 amend local commit,不 push。
  • push:只发布已有 commit,不把 dirty 自动 commit。
  • commit+push:caller 依次执行一次 commit 和一次 push,保留两个独立 Result;不是原子 transaction。
  • workspace update:只有 Buildr Skill 等 consumer 已明确 workspace、upstream、update operation 与授权时才执行;dirty、divergence、冲突、缺失 upstream 或策略不唯一时 blocked,不自动 rebase、merge 或继续 sync。

直接Git收尾是Agent选择的复合意图,不是provider自行推断的operation。Agent可按当前事实选择fetch、精确commit、rebase、普通push与远端回读,每一步都保持独立Result。有匹配任务时,智能体在真实交付后通过任务记录应用保存结果,不要求旧收尾对账;Git Operations自身不写Task lifecycle evidence。provider不自动stash;rebase冲突、目标歧义、已共享历史或需要force push时停止。

本版不预扩 checkout、reset、cherry-pick、stash、branch deletion 等完整命令路由。rebase、merge、revert 或其他动作只有被 consumer 明确选为当前 operation 时才可能进入;不得作为发现分叉或失败后的自动替代策略。

默认硬边界是不自动 stash、reset、rebase、merge、force push、改写共享历史或切换策略。

Fetch 与显式 rebase

fetch 前核验实际 repository、remote identity 与目标 ref;成功后报告 remote-tracking ref 的 before/after identity,treeChanged: falsehistoryChanged: false,并把 ref 更新列入 effects。fetch 失败时保留已在其他 repository 发生的独立 Result,不把多仓库 caller 编排伪装为原子 transaction。

rebase 只有在 consumer 已明确选择 local branch、target ref、允许 local tree/history effect,并且 provider证明当前分支匹配、index/working tree clean、没有进行中的 Git operation、local-only commits 未 push 且未共享时才能执行。已对齐、仅落后与 clean 未共享分叉都返回真实 before/after 与 tree/history 变化;共享风险或 target drift 无法证明时在 rebase 前 blocked

Read the full file on GitHub · 101 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed 8384c1b3dad5
  2. 4d ago First seen · 101 lines · 105 tokens per session scan A 4a5a4b1c4289

Subscribe to this mod's changes

git-operations is a skill published in the GitHub repository BuildrAI/Buildr (24 stars, last pushed today), licensed MIT. It adds 105 tokens to every session and 2,098 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

brainstorming

You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.

obra/superpowers · 37 tokens

auto-perf-optimize

Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.

microsoft/vscode · 62 tokens

chat-perf

Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.

microsoft/vscode · 51 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens