vigilante-issue-implementation-on-rush-monorepo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vigilante-issue-implementation-on-rush-monorepo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Implement one GitHub issue from Vigilante dispatch through validated code changes, a pushed branch, and an opened pull request from the provided worktree. Always work inside the assigned worktree, respect repository instructions, and keep the GitHub issue updated with start, plan, progress, PR, and failure comments.
rush.json, project folders, and workspace roots before choosing commands.vigilante-local-service-dependencies skill and prefer the repository's docker-compose-launch flow when it exists.AGENTS.md when presentREADME.mdvigilante gh issue comment.vigilante gh issue comment.Base branch: <branch-name> (label is case-insensitive; <branch-name> is trimmed and may be surrounded by backticks).git fetch origin <base> inside the assigned worktree before code changes.origin/<base> with git reset --hard origin/<base> (no commits yet) or git rebase origin/<base> (commits present).<base> as the PR target later and mention it in the implementation-plan comment.rush test, rush build, rushx, phased commands, or package-level scripts invoked through Rush-compatible flows.vigilante logs --repo <owner/name> --issue <n> to determine whether the problem is in the code, test setup, or environment before retrying.vigilante commit for all commit-producing operations. Do not use git commit or GitHub CLI commit flows directly.git config with a coding-agent identity.Co-authored by: trailers or any other agent attribution for Codex, Claude, Gemini, or similar coding-agent identities.--base <base> to vigilante gh pr create and state in the PR body and the PR-opened issue comment that the PR is stacked on <base>.vigilante gh issue comment for progress updates, milestone updates, PR creation, and execution failures.vigilante logs --repo <owner/name> --issue <n> before retrying or reporting the blocker.Base branch: directive that points at a branch missing from the remote is a blocker: comment a failure on the issue and stop instead of falling back to the default branch.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.