Навыки sync-before-work

📦

sync-before-work

Name: sync-before-work
Author: vaibhavarora14

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды🔑 Переменные окружения

Synchronize Git Before Editing

Code changes can begin from an outdated branch and create avoidable conflicts. This skill checks remote state and safely incorporates the default branch.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "sync-before-work" from https://skillstore.io/skills/vaibhavarora14-sync-before-work.md and its manifest at https://skillstore.io/api/skills/vaibhavarora14-sync-before-work/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/vaibhavarora14-sync-before-work.md Подписанный manifest GET /api/skills/vaibhavarora14-sync-before-work/manifest Подписанный lockfile GET /api/skills/vaibhavarora14-sync-before-work/lockfile

Протестировать

Использование «sync-before-work». Check this repository without network access.

Ожидаемый результат:

The current branch already contains the locally cached default branch. No files or commits changed.

Использование «sync-before-work». Preview synchronization with the latest remote state.

Ожидаемый результат:

The remote default branch was fetched. The current branch can fast-forward, but preview mode made no branch change.

Использование «sync-before-work». Synchronize this feature branch before editing.

Ожидаемый результат:

Synchronization stopped because the worktree contains local changes. Commit or remove them before applying the update.

Аудит безопасности

Высокий риск

v1 • 25.08.2026 Открыть версионный отчет

Most detections confuse JavaScript template literals, Markdown formatting, or normal environment inheritance with shell or sensitive-file access. The Git subprocess is intentional, but merge and rebase can execute configured hooks under the current user account.

Просканировано файлов

654

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Высокий

scripts/sync-before-work.mjs:369-394 references/SAFETY-CONTRACT.md:34

Configured Git Hooks May Execute

Apply mode runs Git merge or rebase, which can execute configured hooks with the current user's permissions. The safety contract acknowledges this behavior.

The script directly invokes merge and rebase, and its safety contract explicitly states that repository hooks may run.

Пункты проверки возможностей (2)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

scripts/sync-before-work.mjs:84

Synchronous spawn

return spawnSync("git", args, {

The wrapper synchronously executes Git commands that can fetch remote content and mutate the current branch. Merge and rebase may also execute configured Git hooks.

Низкий

scripts/sync-before-work.mjs:88

Environment variable object

...process.env,

The code forwards the complete process environment to every Git subprocess. This can expose unrelated credentials to configured Git helpers or hooks.

Факторы риска

⚙️ Внешние команды (50)

🔑 Переменные окружения (1)

scripts/sync-before-work.mjs:88

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/vaibhavarora14-sync-before-work/security.svg)](https://skillstore.io/skills/vaibhavarora14-sync-before-work?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/vaibhavarora14-sync-before-work?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vaibhavarora14-sync-before-work/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/vaibhavarora14-sync-before-work.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

vaibhavarora14. (2026). sync-before-work security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1

Цитата BibTeX

@techreport{vaibhavarora14-vaibhavarora14-sync-before-work-2026,
  author = {vaibhavarora14},
  title = {sync-before-work security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "sync-before-work security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "vaibhavarora14"
date-released: "2026-08-25"
url: "https://skillstore.io/skills/vaibhavarora14-sync-before-work/audits/1"
identifiers:
  - type: other
    value: "skillstore:vaibhavarora14-sync-before-work:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Start an AI coding task

Synchronize a feature branch before an agent edits files.

Resume paused development

Check whether the remote default branch moved before continuing local work.

Standardize repository preparation

Apply one guarded synchronization process across supported coding assistants.

Попробуйте эти промпты

Check synchronization status

Check whether this branch includes the latest remote default branch. Do not fetch or change files.

Preview the update

Fetch the remote default branch and preview the required synchronization. Do not change the current branch.

Synchronize safely

Synchronize this clean branch with the latest remote default branch using the default merge strategy. Stop on any safety refusal.

Rebase an unpublished branch

Verify that this branch is unpublished, then synchronize it by rebasing onto the latest remote default branch. Stop if publication is detected.

Лучшие практики

Use preview mode when branch ownership or the expected operation is uncertain.
Keep merge as the default strategy for shared or published branches.
Review any reported merge, rebase, or recovery result before editing.

Избегать

Do not apply synchronization to a dirty worktree.
Do not request rebase for published or shared branches.
Do not ignore a conflict, recovery failure, or safety refusal.

Часто задаваемые вопросы

Does the skill push changes?

No. It only reads remote state and changes the current local branch when apply mode permits.

Can it work without network access?

Yes. Check mode uses local references, but those references may be stale.

What happens with uncommitted files?

Apply mode stops when staged, unstaged, or untracked files exist.

When does it use rebase?

Rebase requires explicit selection and is refused when the branch appears published.

How are conflicts handled?

The script aborts the merge or rebase and verifies restoration of the original commit.

Can Git hooks run?

Yes. Configured hooks may run during merge or rebase operations with the current user's permissions.

Сведения для разработчиков

Автор

vaibhavarora14

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/vaibhavarora14/sync-before-work/tree/4c45e477977256c196edeb42985aa9171257b6a5/skills/sync-before-work

Ссылка

2744e7ea0e8626b2d5633ac87902d7c6db32d521

Актуальность поддержки

26.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📁 agents/

📄 openai.yaml

📁 assets/

📁 instructions/

📄 AGENTS.md.snippet

📄 CLAUDE.md.snippet

📄 clinerules-sync-before-work.md

📄 copilot-instructions.md.snippet

📄 cursor-sync-before-work.mdc

📄 GEMINI.md.snippet

📄 windsurf-sync-before-work.md

📁 references/

📄 CLI.md

📄 SAFETY-CONTRACT.md

📁 scripts/

📄 sync-before-work.mjs

📄 SKILL.md