Habilidades sync-before-work

📦

sync-before-work

Name: sync-before-work
Author: vaibhavarora14

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🔑 Variables de entorno

Synchronize Git Before Editing

Code changes can begin from an outdated branch and create avoidable conflicts. This skill checks remote state and safely incorporates the default branch.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "sync-before-work" from https://skillstore.io/skills/vaibhavarora14-sync-before-work.md and its manifest at https://skillstore.io/api/skills/vaibhavarora14-sync-before-work/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/vaibhavarora14-sync-before-work.md Manifest firmado GET /api/skills/vaibhavarora14-sync-before-work/manifest Lockfile firmado GET /api/skills/vaibhavarora14-sync-before-work/lockfile

Pruébalo

Usando "sync-before-work". Check this repository without network access.

Resultado esperado:

The current branch already contains the locally cached default branch. No files or commits changed.

Usando "sync-before-work". Preview synchronization with the latest remote state.

Resultado esperado:

The remote default branch was fetched. The current branch can fast-forward, but preview mode made no branch change.

Usando "sync-before-work". Synchronize this feature branch before editing.

Resultado esperado:

Synchronization stopped because the worktree contains local changes. Commit or remove them before applying the update.

Auditoría de seguridad

Riesgo alto

v1 • 25/8/2026 Abrir el informe versionado

Most detections confuse JavaScript template literals, Markdown formatting, or normal environment inheritance with shell or sensitive-file access. The Git subprocess is intentional, but merge and rebase can execute configured hooks under the current user account.

Archivos escaneados

654

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto

scripts/sync-before-work.mjs:369-394 references/SAFETY-CONTRACT.md:34

Configured Git Hooks May Execute

Apply mode runs Git merge or rebase, which can execute configured hooks with the current user's permissions. The safety contract acknowledges this behavior.

The script directly invokes merge and rebase, and its safety contract explicitly states that repository hooks may run.

Elementos de revisión de capacidades (2)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

scripts/sync-before-work.mjs:84

Synchronous spawn

return spawnSync("git", args, {

The wrapper synchronously executes Git commands that can fetch remote content and mutate the current branch. Merge and rebase may also execute configured Git hooks.

Bajo

scripts/sync-before-work.mjs:88

Environment variable object

...process.env,

The code forwards the complete process environment to every Git subprocess. This can expose unrelated credentials to configured Git helpers or hooks.

Factores de riesgo

⚙️ Comandos externos (50)

🔑 Variables de entorno (1)

scripts/sync-before-work.mjs:88

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/vaibhavarora14-sync-before-work/security.svg)](https://skillstore.io/skills/vaibhavarora14-sync-before-work?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/vaibhavarora14-sync-before-work?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vaibhavarora14-sync-before-work/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/vaibhavarora14-sync-before-work.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

vaibhavarora14. (2026). sync-before-work security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1

Cita BibTeX

@techreport{vaibhavarora14-vaibhavarora14-sync-before-work-2026,
  author = {vaibhavarora14},
  title = {sync-before-work security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sync-before-work security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "vaibhavarora14"
date-released: "2026-08-25"
url: "https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1"
identifiers:
  - type: other
    value: "skillstore:vaibhavarora14-sync-before-work:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Start an AI coding task

Synchronize a feature branch before an agent edits files.

Resume paused development

Check whether the remote default branch moved before continuing local work.

Standardize repository preparation

Apply one guarded synchronization process across supported coding assistants.

Prueba estos prompts

Check synchronization status

Check whether this branch includes the latest remote default branch. Do not fetch or change files.

Preview the update

Fetch the remote default branch and preview the required synchronization. Do not change the current branch.

Synchronize safely

Synchronize this clean branch with the latest remote default branch using the default merge strategy. Stop on any safety refusal.

Rebase an unpublished branch

Verify that this branch is unpublished, then synchronize it by rebasing onto the latest remote default branch. Stop if publication is detected.

Mejores prácticas

Use preview mode when branch ownership or the expected operation is uncertain.
Keep merge as the default strategy for shared or published branches.
Review any reported merge, rebase, or recovery result before editing.

Evitar

Do not apply synchronization to a dirty worktree.
Do not request rebase for published or shared branches.
Do not ignore a conflict, recovery failure, or safety refusal.

Preguntas frecuentes

Does the skill push changes?

No. It only reads remote state and changes the current local branch when apply mode permits.

Can it work without network access?

Yes. Check mode uses local references, but those references may be stale.

What happens with uncommitted files?

Apply mode stops when staged, unstaged, or untracked files exist.

When does it use rebase?

Rebase requires explicit selection and is refused when the branch appears published.

How are conflicts handled?

The script aborts the merge or rebase and verifies restoration of the original commit.

Can Git hooks run?

Yes. Configured hooks may run during merge or rebase operations with the current user's permissions.

Detalles del desarrollador

Autor

vaibhavarora14

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/vaibhavarora14/sync-before-work/tree/4c45e477977256c196edeb42985aa9171257b6a5/skills/sync-before-work

Ref.

2744e7ea0e8626b2d5633ac87902d7c6db32d521

Actualidad del mantenimiento

26/8/2026

Uso

1 descargas · 0 vistas

Estructura de archivos

📁 agents/

📄 openai.yaml

📁 assets/

📁 instructions/

📄 AGENTS.md.snippet

📄 CLAUDE.md.snippet

📄 clinerules-sync-before-work.md

📄 copilot-instructions.md.snippet

📄 cursor-sync-before-work.mdc

📄 GEMINI.md.snippet

📄 windsurf-sync-before-work.md

📁 references/

📄 CLI.md

📄 SAFETY-CONTRACT.md

📁 scripts/

📄 sync-before-work.mjs

📄 SKILL.md