foundation: Skill for Cursor

.cursor/skills/push/SKILL.md

push is a skill for Cursor from markmhendrickson/foundation. It costs 15 tokens per session (1,821 once invoked), scanned A, a copy of push, MIT.

A workflow for pushing the current Git branch to its origin remote, the shared repository location. It checks the remote, branch, and pending commits before sending changes, and can work within a named Git submodule.

In plain words
What is it for?
Publishing the current branch to origin, or publishing a specified submodule’s branch. It is intended for repositories that use the configuration described in foundation-config.yaml.
Why use it?
Pushing changes manually can target the wrong repository or fail because there is no remote or no unpushed commit. This adds checks and handles the separate submodule case.

Skill for Cursor

Written for Cursor: installed under .cursor/.

This is markmhendrickson/foundation's own configuration. It tells Cursor how to work on foundation itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything foundation configures →

Reuse

Borrowing it

Nothing to install: this file belongs to markmhendrickson/foundation. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/markmhendrickson/foundation/main/.cursor/skills/push/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/markmhendrickson/foundation

Made for: Cursor.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for push

README.md
[![agentmods](https://agentmods.dev/badge/skills/markmhendrickson/foundation/push/github.svg)](https://agentmods.dev/skills/markmhendrickson/foundation/push)
Your own site
<a href="https://agentmods.dev/skills/markmhendrickson/foundation/push"><img src="https://agentmods.dev/badge/skills/markmhendrickson/foundation/push/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for push

Your own site · 80×15
<a href="https://agentmods.dev/skills/markmhendrickson/foundation/push"><img src="https://agentmods.dev/badge/skills/markmhendrickson/foundation/push.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 15 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,821 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 95% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00015 $0.01821
Opus 5.5 $0.00006 $0.00728
Sonnet 5.5 $0.00003 $0.00364
Haiku 4.5 $0.00002 $0.00182

Measured 1mo ago against content hash 1b4504b2311c, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

push scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

95% identical to push — 7 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.cursor/skills/push/SKILL.md · 255 lines

How it starts

The opening of the file, as written. The whole thing — 255 lines — stays where its author put it; the contents beside it link to each section on GitHub.

push

Push current branch to origin remote, checking if remote exists first.

SUBMODULE MODE: If a submodule name is provided (e.g., /push foundation), scope operations to that submodule only, not the main repository.

Configuration is read from foundation-config.yaml.

If submodule name provided:

  1. Check if submodule exists: git submodule status <submodule-name>
  2. Change to submodule directory: cd <submodule-name>
  3. Run push workflow in submodule context
  4. Exit after submodule push (do NOT push main repository)

If no submodule name provided, proceed with main repository push workflow below.

Workflow Overview

  1. Check if origin remote exists
  2. Verify current branch
  3. Check for unpushed commits
  4. Push to origin
  5. Handle errors appropriately

Tasks

Step 1: Determine Scope

If submodule name provided:

  1. Verify submodule exists:

    if ! git submodule status <submodule-name> >/dev/null 2>&1; then
      echo "❌ Submodule not found: <submodule-name>"
      exit 1
    fi
    
  2. Save parent directory and change to submodule directory:

    ORIGINAL_DIR=$(pwd)  # Save parent directory before cd
    cd <submodule-name> || exit 1
    
  3. Update scope context (all subsequent operations in submodule)

If no submodule name provided, proceed with main repository context.

Step 2: Check if Origin Remote Exists

echo "🔍 Checking for origin remote..."

# Check if any remotes exist
if ! git remote | grep -q .; then
  echo "❌ Error: No git remotes configured"
  echo ""
  echo "To add a remote, run:"
  echo "  git remote add origin <remote-url>"
  echo "  git push -u origin <branch-name>"
  exit 1
fi

# Check specifically for origin remote
if ! git remote | grep -q "^origin$"; then
  echo "❌ Error: 'origin' remote not found"
  echo ""
  echo "Available remotes:"
  git remote -v
  echo ""
  echo "To add origin remote, run:"
  echo "  git remote add origin <remote-url>"
  echo "  git push -u origin <branch-name>"
  exit 1
fi

# Display origin URL
ORIGIN_URL=$(git remote get-url origin 2>/dev/null || echo "unknown")
echo "✅ Origin remote found: $ORIGIN_URL"

Read the full file on GitHub · 255 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 255 lines · 15 tokens per session scan A 1b4504b2311c

Subscribe to this mod's changes

push is a skill published in the GitHub repository markmhendrickson/foundation (2 stars, last pushed 2mo ago), licensed MIT. It adds 15 tokens to every session and 1,821 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 95% identical to push, differing in 7 lines, and is treated as a copy.