Agent Skills › R6410418/Jackrong-llm-finetuning-guide › github-sync-gate

github-sync-gate

GitHub

控制代码向GitHub同步的安全门禁。需用户输入特定指令触发，执行隐私扫描、链接验证及敏感文件检查，确保无泄露后安全推送或创建PR。

.agents/skills/github-sync-gate/SKILL.md R6410418/Jackrong-llm-finetuning-guide

Trigger Scenarios

准备提交或推送代码到远程仓库打开Pull Request前用户发送'同步'指令

Install

npx skills add R6410418/Jackrong-llm-finetuning-guide --skill github-sync-gate -g -y

More Options

Non-standard path

npx skills add https://github.com/R6410418/Jackrong-llm-finetuning-guide/tree/main/.agents/skills/github-sync-gate -g -y

Use without installing

npx skills use R6410418/Jackrong-llm-finetuning-guide@github-sync-gate

指定 Agent (Claude Code)

npx skills add R6410418/Jackrong-llm-finetuning-guide --skill github-sync-gate -a claude-code -g -y

安装 repo 全部 skill

npx skills add R6410418/Jackrong-llm-finetuning-guide --all -g -y

预览 repo 内 skill

npx skills add R6410418/Jackrong-llm-finetuning-guide --list

SKILL.md

Frontmatter

{
    "name": "github-sync-gate",
    "description": "Enforce this repository's local-review-first GitHub sync policy. Use when Codex is preparing, validating, staging, committing, pushing, or opening a pull request for this repository and must wait for the exact approval phrase before any remote write."
}

GitHub Sync Gate

Remote writes are forbidden until the user sends exactly:

同步

Do not treat any other approval phrase as sync approval.

Before Sync

After exact approval and before any remote write:

Re-run privacy scans.
Re-run repository-relative Markdown link validation.
Re-run syntax checks.
Re-run git diff --check.
Inspect staged files for tokens, private paths, private SSH aliases, logs, caches, datasets, model weights, GGUF files, safetensors files, and checkpoints.
Fetch the latest remote state and handle divergence safely.

Push Policy

Never force-push.
Prefer a direct push to main only when the local integration can be applied safely and the remote branch has not diverged.
If direct push is unsafe or blocked, push the feature branch and open a pull request.
Report the pushed branch, commit hash, and remote result.
Never publish Hugging Face models merely because GitHub sync was approved.