git-flow-next

A guide for repositories that use Git Flow, a branching model where develop is the shared integration branch and main contains production code. It covers branches, worktrees, commits, pull requests, and releases.

In plain words
What is it for?
Use it to create feature, release, and hotfix branches, set up worktrees, target pull requests, validate changes on develop, and promote releases to main.
Why use it?
It prevents changes from being based on the wrong branch or merged with the wrong history rules.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dryvist/claude-code-plugins/git-flow-next
Any agent
npx skills add dryvist/claude-code-plugins --skill git-flow-next
Clone the repo
git clone --depth 1 https://github.com/dryvist/claude-code-plugins

Made for: Claude Code, Codex.

Per session 56 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,163 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00056 $0.01163
Opus 5 $0.00028 $0.00581
Sonnet 5 $0.00011 $0.00233
Haiku 4.5 $0.00006 $0.00116

Measured 2d ago against content hash a0522bc39999, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

git-flow-next scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

git-workflows/skills/git-flow-next/SKILL.md · 98 lines

How it starts

The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.

git-flow-next Usage Guide

Use this skill when working on repositories configured for the Git Flow branching model.

1. Detect Adoption First

Before any branch, PR, or release work, check the repo's remote default branch:

gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name'
  • If default branch is develop -> Follow this skill.
  • If default branch is main -> Use trunk flow (squash-to-main directly). Do NOT follow this skill.
  • Never infer adoption from the current local branch name.

2. The Branching Model

Branch Role Gets changes by
main Production. Protected; no direct pushes. Merge commits only — squash and rebase are banned.
develop Default integration branch. Protected; no direct pushes. Squash-merged feature PRs (default); merge commits for back-merges.
feature/<issue>-<sid8>-<slug> Topic work Branched from fresh develop.
release/<version> Release stabilization Branched from develop; merge-committed to main; back-merged to develop.
hotfix/<slug> Production fix Branched from main; PR to main (merge commit); back-merged to develop.

3. Dedicated Worktree Setup

All feature development happens in dedicated worktrees. Branch names carry the session id: <issue>-<sid8>-<slug>, where <sid8> is the first 8 hex chars of the session/conversation id (generate openssl rand -hex 4 if the runtime has none). Issueless work drops the issue segment: <sid8>-<slug>. The worktree directory matches the branch's name segment. Unique-per-session names make worktree/branch collisions between concurrent sessions structurally impossible; refs dryvist/ai-assistant-instructions#749.

To prevent wrong nesting:

  1. Resolve the destination path using an absolute anchor and create the branch directly in the worktree:

    name="123-03a3a401-fix-inventory-loader"
    git worktree add -b "feature/$name" \
      "$(dirname "$(git rev-parse --git-common-dir)")/.worktrees/$name" origin/develop
    

Read the full file on GitHub · 98 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 98 lines · 56 tokens per session scan A a0522bc39999

Subscribe to this mod's changes

git-flow-next is a skill published in the GitHub repository dryvist/claude-code-plugins (3 stars, last pushed 2d ago), licensed Apache-2.0. It adds 56 tokens to every session and 1,163 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories