← 返回 Skills 市场
124
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install proper-git-commit
功能描述
Smart git commit with remote sync, amend intelligence, and conventional commits. Use when the user asks to commit changes, stage and commit, "/commit", save...
安全使用建议
This skill appears to implement a helpful commit workflow but has practical risks. Before installing or enabling it: 1) Require explicit user confirmation before any git pull/rebase or push — do not allow automatic network operations on casual mentions. 2) Remove or make optional the automatic 'git add -A' and instead present a staged-file selection to the user; ensure it never stages known secret files by default. 3) Make the inclusion of AI-model or vendor info in commit footers optional and clearly documented — this can leak runtime/model metadata to remote servers. 4) Test the skill in a disposable repository to observe behavior (especially rebase/abort flows). 5) If you do enable autonomous invocation, restrict triggers (do not trigger on every mention of 'commit' — require a command/confirmation). These changes would reduce the risk of accidental data exposure or unwanted pushes.
功能分析
Type: OpenClaw Skill
Name: proper-git-commit
Version: 1.0.0
The skill provides a structured workflow for git commits, including remote synchronization, conventional commit message generation, and safety checks to avoid committing secrets (e.g., .env, .pem). It uses standard git commands and includes robust error handling, such as automatically aborting rebases on conflict, without any evidence of malicious intent or data exfiltration.
能力评估
Purpose & Capability
The name/description match the git commands and flow in SKILL.md (fetch, rebase, diff, amend/new commit, generate conventional commits). However, the SKILL.md prescribes embedding agent/model info into commit footers and instructs the skill to 'TRIGGER' on any mention of committing — this aggressive trigger behavior is not reflected in the registry metadata (always:false) and feels disproportionate to a simple commit helper.
Instruction Scope
Instructions include running repository-wide commands (git fetch/pull/rebase, git add -A, git push) and rely on the agent's 'judgment' to stage changes while also telling it to avoid secrets. This is ambiguous and grants broad discretion: a blanket git add -A can stage secrets accidentally; automatic rebase/pull and push behavior can expose private data or rewrite history without an explicit, enforced confirmation step. The SKILL.md's required trigger behavior ('TRIGGER this skill whenever the user mentions committing') is overly broad and risks unintended commits or pushes.
Install Mechanism
Instruction-only skill with no install steps and no code files. Lowest installation risk — nothing is written to disk by a package mechanism.
Credentials
The skill asks the agent to append 'Co-authored-by: Claude <[email protected]>' and 'AI-model: <model-id>' using 'what's available from the environment' but declares no required environment variables. Expecting model or system context without declaring required env vars is an untracked data request. Including model identifiers and a fixed vendor email in commits may leak internal runtime metadata to remote Git servers and seems unnecessary for a generic git helper.
Persistence & Privilege
Metadata does not request always:true and the skill is user-invocable only — appropriate. However, combined with the SKILL.md's instruction to trigger on casual mentions and to perform networked operations (fetch/pull/rebase/push), autonomous invocation (the platform default) would give this skill the ability to modify and push remote repositories without strong explicit confirmation. That combination raises operational risk even though no permanent presence or special privileges are requested.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install proper-git-commit - 安装完成后，直接呼叫该 Skill 的名称或使用
/proper-git-commit触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of smart git commit skill with remote sync and amend intelligence.
- Automatically checks and syncs with the remote branch before committing, aborting on conflicts for safety.
- Analyzes diffs to determine whether to create a new commit or amend the previous commit, using strict conventional commit rules.
- Generates standardized conventional commit messages and includes model/agent info in the commit footer.
- Stages relevant changes (excluding secrets), with built-in safety and clear user guidance on conflicts or pre-commit hook failures.
- Supports optional push when requested, with safeguards against unsafe operations.
元数据
常见问题
Commit code safe and nice 是什么？
Smart git commit with remote sync, amend intelligence, and conventional commits. Use when the user asks to commit changes, stage and commit, "/commit", save... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 124 次。
如何安装 Commit code safe and nice？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install proper-git-commit」即可一键安装，无需额外配置。
Commit code safe and nice 是免费的吗？
是的，Commit code safe and nice 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Commit code safe and nice 支持哪些平台？
Commit code safe and nice 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Commit code safe and nice？
由 Hugo Gu（@hugogu）开发并维护，当前版本 v1.0.0。
推荐 Skills