git-submodule
Manage Git Submodules Safely
Git submodules can be hard to add, update, and remove without mistakes. This skill provides structured workflows for common submodule tasks.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "git-submodule" from https://skillstore.io/skills/supercent-io-git-submodule.md and its manifest at https://skillstore.io/api/skills/supercent-io-git-submodule/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "git-submodule". I need to add a shared components repository as a submodule.
Expected outcome:
- A short decision check confirms the repository URL, target path, and tracking strategy.
- The response gives ordered Git steps for adding, pinning, and committing the submodule reference.
- It ends with verification steps for status and the parent repository commit.
Using "git-submodule". Our build fails because submodule files are missing after clone.
Expected outcome:
- The response identifies missing initialization as the likely issue.
- It provides recursive initialization and CI checkout guidance in plain language.
- It includes checks to confirm all nested submodules are present.
Using "git-submodule". We want to convert a submodule into normal project files.
Expected outcome:
- The response outlines backup, deinitialization, cleanup, restoration, and commit steps.
- It highlights commands that delete local metadata and require careful path review.
Security Audit
SafeThe reported Ruby and shell execution hits are Markdown fences or inline code in documentation, not executable Ruby or hidden shell evaluation. Hardcoded URLs are Git examples and reference links, and the filesystem findings are visible submodule workflow examples with scoped relative paths. No prompt injection, exfiltration intent, or hidden execution logic was found.
Risk Factors
⚙️ External commands (64)
🌐 Network access (13)
📁 Filesystem access (2)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/supercent-io-git-submodule/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/supercent-io-git-submodule?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/supercent-io-git-submodule?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/supercent-io-git-submodule/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/supercent-io-git-submodule.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
supercent-io. (2026). git-submodule security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/supercent-io-git-submodule/audits/5BibTeX citation
@techreport{supercent-io-supercent-io-git-submodule-2026,
author = {supercent-io},
title = {git-submodule security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/supercent-io-git-submodule/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "git-submodule security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "supercent-io"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/supercent-io-git-submodule/audits/5"
identifiers:
- type: other
value: "skillstore:supercent-io-git-submodule:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: HighWhat You Can Build
Add Shared Libraries
Add a shared repository as a submodule and commit the parent repository reference correctly.
Prepare Builds With Submodules
Configure clone and CI workflows so nested dependencies are available during builds.
Clean Up Legacy Submodules
Remove or convert an old submodule while preserving the intended project files.
Try These Prompts
Help me add a Git submodule for this repository. Ask for the repository URL, target path, and branch or tag before giving steps.
I cloned a repository that uses submodules. Give me the safest steps to initialize and verify all submodules.
Guide me through updating one or more submodules, reviewing the changes, and committing the parent repository reference.
Help me plan a submodule removal or conversion. Include verification steps, backup checks, and warnings for destructive cleanup commands.
Best Practices
- Confirm every repository URL and target path before adding or updating a submodule.
- Review submodule status and parent repository diffs before committing reference changes.
- Treat cleanup commands as destructive and verify backups before removing local metadata.
Avoid
- Running submodule removal commands without checking the current directory and target path.
- Updating submodules without committing the changed reference in the parent repository.
- Using untrusted repository URLs in submodules without reviewing ownership and access controls.
Frequently Asked Questions
Does this skill run Git commands automatically?
Can it help with private submodules?
Does it support nested submodules?
Can it remove a submodule safely?
Is this useful for CI systems?
What should I replace in the examples?
Developer Details
Author
supercent-ioLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
f93e9bb0daca99badb6a7e574b97737155d57cb3
Maintenance freshness
7/18/2026
Usage
6 downloads · 138 views
File structure
📄 SKILL.md