How do I install the Gitlawb Sidecar skill?

Run npx skillmds@latest add majiayu000/gitlawb-sidecar in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Gitlawb Sidecar safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Gitlawb Sidecar?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Gitlawb Sidecar free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Gitlawb Sidecar?

majiayu000 (@majiayu000) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Gitlawb Sidecar by majiayu000 — Agent Skill

Name: Gitlawb Sidecar
Rating: 4.666666666666667 (3 reviews)
Author: majiayu000

Gitlawb Sidecar

Add a signed GitLawb mirror next to the existing GitHub remote. Use when the user wants to publish, backup, prove authorship, put work on GitLawb, or attach a verifiable certificate to a commit or pull request. Do NOT use for replacing GitHub, deleting origin, or pushing private/secret files.

majiayu000 Updated Sep 9, 2026 567 repo stars

File contents

GitLawb sidecar

GitHub stays origin. This tool adds a second remote named gitlawb and pushes a public signed copy to https://node.gitlawb.com.

Commands

npx gitlawb-sidecar@latest init      # first time in a repo
npx gitlawb-sidecar@latest sync      # push HEAD and fetch the cert
npx gitlawb-sidecar@latest verify    # check HEAD has a matching cert
npx gitlawb-sidecar@latest status
npx gitlawb-sidecar@latest doctor    # exits 1 if anything is wrong

Rules

Never run a command named gl. oh-my-zsh aliases gl to git pull.
Never change, rename, or delete the origin remote.
Never push .env, identity.pem, private keys, or anything the user would not put on a public GitHub repo. GitLawb copies are public.
After init or sync, paste the explorer URL and cert id in your reply.
If gitlawb-sidecar is not installed, use npx gitlawb-sidecar@latest.
If doctor fails, fix what it prints. Do not invent gitlawb:// URLs.

First-time flow

npx gitlawb-sidecar@latest init

This creates a DID if needed, registers on the public node, adds the gitlawb remote, pushes HEAD, and writes:

.gitlawb-sidecar.json
.github/workflows/gitlawb-sidecar.yml
this skill under .claude/skills, .agents/skills, and .cursor/skills

Tell the user to add repo secret GITLAWB_IDENTITY_PEM (contents of identity.pem) so GitHub Actions can sign. Point them at npx gitlawb-sidecar status --show-pem-hint.

Frequently asked questions