git

A set of Git workflow rules for this repository. Git is a tool for recording code changes, branches, merges, and releases.

In plain words
What is it for?
Preparing releases, merging feature or release branches, tagging the final release commit, and pushing the required branches and tags.
Why use it?
It keeps release history explicit by requiring merge commits and prevents releases from skipping the development branch. This makes the path from feature work to a release easier to see.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/ondeinference/onde-cli/git
Any agent
npx skills add ondeinference/onde-cli --skill git
Clone the repo
git clone --depth 1 https://github.com/ondeinference/onde-cli

Made for: Claude Code, Codex.

Per session 9 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 528 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00009 $0.00528
Opus 5 $0.00005 $0.00264
Sonnet 5 $0.00002 $0.00106
Haiku 4.5 $0.00001 $0.00053

Measured yesterday against content hash aaf7064ddee4, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

git scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.agents/skills/git/SKILL.md · 71 lines

How it starts

The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Git skill

Core rule

  • Use --no-ff. Important.

What this means in practice

  • Do not fast-forward merge feature branches, release branches, or hotfix branches.
  • Prefer explicit merge commits so the branch history stays visible.
  • Release prep goes through development on its way to main, with --no-ff at every hop.
  • Tag the merge commit that contains the final release state.

Branch flow

Feature branches merge into development. Releases go:

release/vX.Y.Z -> development -> main

Never merge a release branch straight into maindevelopment has to carry the release state too, or the next feature branch starts from a base that is missing it.

Release guidance

# 1. cut the release branch from development, commit the version bumps
git checkout development
git checkout -b release/vX.Y.Z
git commit -am "Prepare vX.Y.Z"

# 2. release branch -> development
git checkout development
git merge --no-ff release/vX.Y.Z -m "Merge release prep for vX.Y.Z"

# 3. development -> main
git checkout main
git merge --no-ff development -m "Merge development for vX.Y.Z"

# 4. tag the main merge commit, then push
git tag vX.Y.Z
git push origin development
git push origin main
git push origin vX.Y.Z

The tag belongs on the step-3 merge commit on main, not on the release branch and not on development. Pushing the tag is what triggers the wrapper publish workflows, which read the version from the tag.

If the work is already on main, make a normal commit and tag that commit. Do not rewrite history just to avoid a merge commit.

Avoid

  • git merge --ff
  • git pull --ff-only as a default recommendation for this repo's merge policy
  • Tagging a branch tip that has not been merged into main when the intended release source of truth is main
  • Merging a release branch directly into main, skipping development

Why

The repo wants explicit history. Release commits should be easy to find, easy to audit, and clearly connected to the branch that introduced them.

Read the full file on GitHub · 71 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 71 lines · 9 tokens per session scan A aaf7064ddee4

Subscribe to this mod's changes

git is a skill published in the GitHub repository ondeinference/onde-cli (0 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 9 tokens to every session and 528 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

claude-maintain-models

Add new AI models to Kiln's mlmodellist.py and produce a Discord announcement. Use when the user wants to add, integrate, or register a new LLM model (e.g. Claude, GPT, DeepSeek, Gemini, Kimi, Qwen, Grok) into the Kiln model list, mentions adding a model to mlmodellist.py, asks to discover/find new models that are…

Kiln-AI/Kiln · 110 tokens

kiln-prerelease-check

Run the Kiln pre-release smoke test suite plus the standard CI checks (checks.sh), diagnose every prerelease test that broke (and why), and write a clean readable report with recommended actions. Read-only — it never edits code. Use when the user wants to validate a release candidate, run prerelease tests, or asks for…

Kiln-AI/Kiln · 84 tokens

release-digest

Post a "what's changed since the last release" recap to the release Slack channel for final QA. Groups merged PRs by author and classifies each as feature / bug fix / task. Use when the user wants a release recap, a changelog since the last tag, or to prep QA before cutting a release from main.

Kiln-AI/Kiln · 71 tokens

kiln-check-deprecation

Check Kiln's model list for deprecated or sunset models across all providers. Use when the user wants to find deprecated models, check model availability, audit the model list for stale entries, or mentions model deprecation/sunset/end-of-life.

Kiln-AI/Kiln · 54 tokens

kiln-check-finetune-deprecation

Check Kiln's fine-tunable model list for deprecated or unsupported base models. Use when the user wants to audit fine-tuning support, check if fine-tune base models are still valid, or mentions fine-tune model deprecation.

Kiln-AI/Kiln · 57 tokens

playwright

Look at Kiln's UI in a real browser, and run its end-to-end tests. Use when checking UI you are changing, taking a screenshot of the app, driving the app with playwright-cli, starting the dev sandbox with playwrightserver.sh, running or debugging npm run tests:e2e, or working with the seeded fixture project that gives…

Kiln-AI/Kiln · 81 tokens