A Git commit helper that creates commits using Conventional Commits, a standard format for describing changes. It reads the repository guide, reviews changes, stages relevant files, and signs off the commit.

It helps prepare and create properly formatted commits for staged or unstaged changes.

It removes the need to remember commit-format rules and helps avoid committing the wrong files or adding unwanted metadata.

How finos/git-proxy configures Claude Code and Codex

Reuse

Borrowing it

Nothing to install: this file belongs to finos/git-proxy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/finos/git-proxy/main/.agents/skills/commit/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/finos/git-proxy

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/finos/git-proxy/commit/github.svg)](https://agentmods.dev/skills/finos/git-proxy/commit)

Your own site

<a href="https://agentmods.dev/skills/finos/git-proxy/commit"><img src="https://agentmods.dev/badge/skills/finos/git-proxy/commit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/finos/git-proxy/commit"><img src="https://agentmods.dev/badge/skills/finos/git-proxy/commit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 14 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 475 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector pass 7 Sept 2026

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00014	$0.00475
Opus 5.5	$0.00006	$0.00190
Sonnet 5.5	$0.00003	$0.00095
Haiku 4.5	$0.00001	$0.00047

Measured 1mo ago against content hash 02d3e46d3d03, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/commit/SKILL.md · 66 lines

What it actually says

Create a git commit for the current staged/unstaged changes using Conventional Commits.

Read AGENTS.md first. It is the canonical project guide for this repository.

Rules:

Run git status and git diff to understand what changed
Stage relevant files (prefer specific files over git add -A)
Write a commit message following Conventional Commits format
Use --signoff to sign off using the committer's git config (do NOT hardcode any name/email)
Do NOT add Co-Authored-By or any other trailers beyond Signed-off-by
If there are no changes, say so and stop

Commit format:

<type>[optional scope]: <description>

Types: feat, fix, docs, style, refactor, perf, test, build, ci, chore

Scope (optional): a noun describing the affected area in parentheses. Common scopes: config, api, proxy, db, e2e, docker, ci.

Subject line rules:

Imperative mood ("add", not "added" or "adds")
Do NOT capitalize the first letter after the type prefix
Do NOT end with a period
Keep under 72 characters total

For breaking changes, add ! after the type/scope:

feat(config)!: rename queue config key

Examples of good messages:

"feat(api): add support for rejection reason"
"fix(config): handle invalid regex on commitConfig"
"refactor(ts): remove any/as usages in push-actions"
"test(proxy): add tests for Git hosts other than GitHub"
"docs: update architecture diagram in Architecture.md"
"build: bump express to 5.2.1"
"chore: remove unused import in services/push.ts"

Commit command:

git commit --signoff -m "<type>[scope]: <description>"

Do NOT:

Use long multi-line messages for simple changes
Add Co-Authored-By trailers
Use past tense ("added", "fixed")
Hardcode any author name or email
Omit the type prefix

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 66 lines · 14 tokens per session scan A 02d3e46d3d03

Subscribe to this mod's changes

commit is a skill published in the GitHub repository finos/git-proxy (262 stars, last pushed today), licensed Apache-2.0. It adds 14 tokens to every session and 475 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Git and workflow Security gitops scans

flux-controller-minor-releases

Run the upstream Flux controller minor release procedure for helm-controller, image-automation-controller, image-reflector-controller, kustomize-controller, notification-controller, source-controller, and source-watcher. Use when cutting a new controller minor release (vX.Y.0): creating the release series branch…

fluxcd/agent-skills · 89 tokens

flux-controller-patch-releases

Run the upstream Flux controller patch release procedure for helm-controller, image-automation-controller, image-reflector-controller, kustomize-controller, notification-controller, source-controller, and source-watcher. Use when preparing a new controller patch release from a release series branch, drafting changelog…

fluxcd/agent-skills · 80 tokens

commit-assisted-by

Add an Assisted-by: / git trailer to commits made during an AI-assisted coding session. Trigger on any git commit activity visible in the session — either commits you make yourself, or commits the user makes outside your tool calls that surface in the conversation — even without an explicit request. Also trigger when…

fluxcd/agent-skills · 98 tokens

argocd-expert

Expert-level ArgoCD GitOps deployment, application management, sync strategies, and production operations. Use when the user mentions GitOps, Kubernetes, continuous deployment, declarative, or automation, or when the task involves ArgoCD Architecture, Application CRD, AppProject, or ApplicationSet.

personamanagmentlayer/pcl · 65 tokens

switch-github-creds

A skill to switch GitHub credentials for the agent.

BrianV1981/aim · 17 tokens

fluxcd

Operate Flux GitOps with GitRepository, Kustomization, and HelmRelease pipelines; trace Ready conditions, suspend for incidents, and debug reconcile stalls agents routinely miss.

alivirgo/Major-AI-Skills · 36 tokens

git-proxy: Skill for Claude Code