commit SKILL.md skillA

commit from riot-org/riot is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned

mdr add riot-org/riot/commit@git:20261014.9c3854a

Pins git:20261014.9c3854a in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 17 of 17 checks passed
Kind: SKILL.md skill
Repository: riot-org/riot
Path: crates/riot-kernel/builtin/skills/commit/SKILL.md
Versions recorded: 2
Latest version: git:20261014.9c3854a, committed Oct 14, 2026
First version recorded: Aug 17, 2026
Size: 2,931 bytes
Repository stars: 22
License: a license file GitHub does not identify

要把改动提交成 git commit 时用。先看清工作区里有几件事、按主题分组、只暂存这一组，以及消息里该写什么不该写什么。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# 提交改动

## 先看清全貌，再决定分几个提交

并行跑这三条，不要只看 `git status`：

```bash
git status --short
git diff --stat
git log --oneline -10
```

`git log` 那条是为了**照着这个仓库的习惯来**：标题用什么语言、有没有
`feat:` 这类前缀、正文写多细、提交粒度是大批次还是一改一提。不同仓库
差别很大，猜错的表现是这个提交在历史里读起来像外来的。

判据是**能不能用一句话说清这批改动解决了什么问题**。能，就是一个提交；
需要用「以及」连接两件无关的事，就该切开。

## 只暂存这一组

`[约束]` **不要 `git add -A` 或 `git add .`**，除非你已经确认工作区里只有
这一件事。工作区经常同时挂着几个主题的改动（有些还是用户自己没提完的），
全加进去就把无关的东西一起提了，而那之后再拆得动历史。

逐个文件或逐个目录加，然后确认一遍暂存区：

```bash
git add path/to/a path/to/b
git status --short          # 前缀 M/A 的那些就是这次要提的
```

## 别带上不该带的

- 密钥与凭证：`.env`、`*.pem`、`auth.json`、任何含 token 的文件。
  用户明确要求提交这类文件时，先提醒用户一次。
- 但**生成物不一定该跳过**。有些仓库把生成的类型、schema、lockfile
  检入版本库并在 CI 里校验同步 —— 那种情况下漏掉它们会让 CI 直接红。
  不确定就看 `.gitignore` 和 CI 配置，别按直觉判断。

## 消息

标题一行说清这批做了什么，语言和格式跟着 `git log` 里的既有风格。

正文写**为什么**，不是罗列做了什么 —— 做了什么看 diff 就有，而
「为什么这么做、为什么不用另一条路」只有现在写下来。特别值得写的：

- 不选另一条方案的理由；
- 踩过的坑和它的**具体症状**（「表现是按了没反应」比「修复了事件问题」
  有用得多）；
- 这次改动依赖或守住了什么约束，破了会怎样。

用 HEREDOC 传消息，保证换行不被吃掉：

```bash
git commit -m "$(cat <<'EOF'
标题

正文段落。

EOF
)"
```

## 提交之后

跑一次 `git status` 确认干净，并把结果告诉用户 —— 包括**没提交的那些还留在
工作区**，那是用户接着要处理的。

## 不要做的事

- 不要 `git push`、切分支、`stash`、`reset --hard`，除非用户明确要求。
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add riot-org/riot/commit@sha256:7860b143f99b0ed3

The line at the top of this page pins the label git:20261014.9c3854a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_h6yqsrwt55xncjbx.svg)](https://markdownregistry.com/a/art_h6yqsrwt55xncjbx)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 2 versions of this file, between Aug 17, 2026 and Oct 14, 2026, about one every 58 days.

version	committed	commit	size	audit
git:20261014.9c3854a latest	2026-10-14	9c3854a	2,931 B	A	view · diff
git:20260817.d4dfa41	2026-08-17	d4dfa41	2,925 B	A	view

Audit of the latest version

A 17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Frontmatter block present
pass: Frontmatter declares a name
pass: Frontmatter declares a description
pass: Size between 200 bytes and 200 KB (2931 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

riot-org/riot · 22 stars · license a license file GitHub does not identify · pushed 2026-10-29 · branch master

API

GET https://markdownregistry.com/api/v1/artifacts/art_h6yqsrwt55xncjbx
GET https://markdownregistry.com/api/v1/resolve?ref=riot-org/riot/commit
GET https://markdownregistry.com/api/v1/blob/7860b143f99b0ed3d8cf248661d9b8f3713441b0f7bada27d699261caaf0662b

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from riot-org/riot

add-command SKILL.md skill

riot-org/riot · .riot/skills/add-command/SKILL.md · 给前端加一个 Tauri 命令时用。要改五处，漏了其中三处只表现为运行时「command not found」；权限文件还有个先后顺序的坑会让 build.rs 直接 panic。