cc-system: Skill for Claude Code

.claude/skills/commit/SKILL.md

commit is a skill for Claude Code from greatSumini/cc-system. It costs 0 tokens per session (2,497 once invoked), scanned A, original, MIT.

A procedure for committing the relevant work in a Git repository, with an optional push to the remote repository when the user requests it.

In plain words
What is it for?
Use it when asked to commit current changes, optionally push them, inspect the working tree, choose related files, and write an appropriate commit message.
Why use it?
It helps keep unrelated changes out of a commit and separates logically different work into clear commits. It also checks the session’s intended scope before committing.

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: reads .claude/ paths; mentions Claude Code.

This is greatSumini/cc-system's own configuration. It tells Claude Code how to work on cc-system itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything cc-system configures →

Reuse

Borrowing it

Nothing to install: this file belongs to greatSumini/cc-system. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/greatSumini/cc-system/main/.claude/skills/commit/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/greatSumini/cc-system

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for commit

README.md
[![agentmods](https://agentmods.dev/badge/skills/greatsumini/cc-system/commit/github.svg)](https://agentmods.dev/skills/greatsumini/cc-system/commit)
Your own site
<a href="https://agentmods.dev/skills/greatsumini/cc-system/commit"><img src="https://agentmods.dev/badge/skills/greatsumini/cc-system/commit/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for commit

Your own site · 80×15
<a href="https://agentmods.dev/skills/greatsumini/cc-system/commit"><img src="https://agentmods.dev/badge/skills/greatsumini/cc-system/commit.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,497 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Tool Misuse · line 171
    Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
    Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.02497
Opus 5.5 $0.00000 $0.00999
Sonnet 5.5 $0.00000 $0.00499
Haiku 4.5 $0.00000 $0.00250

Measured 1mo ago against content hash 5ba9257f61d6, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

commit scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/commit/SKILL.md · 200 lines

How it starts

The opening of the file, as written. The whole thing — 200 lines — stays where its author put it; the contents beside it link to each section on GitHub.

사용자가 지금까지의 작업을 git commit(및 선택적으로 push)하도록 지시할 때 따르는 절차. '커밋', 'commit', '커밋 해줘', '커밋푸쉬 ㄱㄱ', 'commit push', '지금까지 한 작업 커밋' 등 commit/push 의도가 보이는 모든 발화에서 트리거된다.


00. 무인 모드 오버라이드 (HARNESS_HEADLESS=1)

이 skill 본문의 어떤 지시보다도 먼저 적용되는 최상위 오버라이드다.

세션 시작 시 반드시 가장 먼저 Bash tool로 다음을 실행해 모드를 확정한다:

echo "HEADLESS=${HARNESS_HEADLESS:-${BET_HEADLESS:-0}}"

출력이 HEADLESS=1 이면 이 세션은 무인 서버 세션이며, 이 skill 본문의 모든 사용자 확인/통지/질문 단계가 무효화된다:

  • "판단이 애매하면 사용자에게 물어본다", "사용자에게 목록과 분류를 보여주고 승인받는다", "쪼갠 결과를 사용자에게 먼저 보여주고 승인받는다", "사용자에게 확인", "발견되면 사용자에게 확인" → 전부 스킵하고 합리적 기본값으로 자동 진행한다.
  • "이 단계를 건너뛰지 않는다", "반드시", "먼저 확인한다" 같은 강한 표현도 HEADLESS=1 에서는 적용되지 않는다.
  • 질문을 출력하고 대기하는 것조차 금지 (stdin이 없음). 바로 결정해서 진행한다.
  • main/master 브랜치 commit도 확인 없이 그대로 진행한다 (호출자가 이미 의도했다고 간주).
  • 호출자가 프롬프트에 명시한 "대상 파일", "제외할 파일"을 그대로 따른다.

출력이 HEADLESS=1 이 아닐 때만 아래 "0. 대원칙" 부터의 인간 대화형 절차를 따른다.


0. 대원칙 (어기면 안 됨)

  1. 현재 대화 컨텍스트와 관련된 파일만 commit한다. 이번 세션에서 내가 직접 만들거나 수정했거나, 사용자와 논의하며 의도적으로 건드린 파일만 대상이다. 작업 중 우연히 바뀐 로컬 파일, 이전 세션의 잔여물, 출처가 불분명한 변경은 절대 함께 commit하지 않는다. 판단이 애매하면 사용자에게 물어본다.
  2. 논리적으로 다른 성격의 변경은 분리된 commit으로 나눈다. 한 번에 한 가지 일만.
  3. push는 사용자가 명시적으로 요청한 경우에만 수행한다. ('push', '푸쉬', '푸시', '올려줘' 등이 발화에 포함된 경우)
  4. --no-verify 금지. pre-commit/pre-push hook은 항상 통과시킨다. hook이 실패하면 원인을 고치거나 사용자에게 보고한다.
  5. main/master 브랜치에 직접 commit하려는 상황이면 먼저 확인한다. 대부분 실수다.
  6. git add . / git add -A 금지. 반드시 관련 파일만 경로를 명시해서 stage한다.
  7. 비밀값·산출물 금지. .env*, *.log, dist/, build/, node_modules/, .DS_Store, 대용량 바이너리 등은 의도적으로 추가한 게 아니면 commit하지 않는다. 발견되면 사용자에게 확인.

1. 절차

1-1. 현재 상태 파악

git status --short
git diff --stat
git log --oneline -15   # 메시지 스타일 재확인
git branch --show-current
  • 작업 브랜치가 main/master인지 확인. 맞으면 대원칙 5 적용.
  • 변경된 모든 파일 목록을 확인한다.

1-2. 관련 파일 선별 (대원칙 1)

Read the full file on GitHub · 200 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 200 lines · 0 tokens per session scan A 5ba9257f61d6

Subscribe to this mod's changes

commit is a skill published in the GitHub repository greatSumini/cc-system (438 stars, last pushed 4mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 2,497 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.