pr-create — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pr-create (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create or update a pull request for the current branch, then wait for BM Bossbot to approve the latest head SHA. This skill never merges a PR.
<theme>: free-form visual direction for the non-gating PRimage. Example: $pr-create "Italian movie poster".
<theme> as style guidance only. It must not affect PR readiness,BM Bossbot review, status checks, or merge behavior.
Ask Codex to use the skill from a feature branch:
$pr-create
$pr-create "Italian movie poster"
$pr-create "80's action movies"Use the plain form when you only want the PR workflow. Pass a theme when you want the non-gating image to lean toward a particular visual direction. The theme can be specific ("Rembrandt-inspired approval scene") or broad ("let the model choose from BM categories").
and semantic PR title shape.
BM_INFOGRAPHIC_THEME block when a theme was supplied.
diff context, and sets the required BM Bossbot Approval status for the exact head SHA.
provenance block:
<!-- BM_INFOGRAPHIC_PROVENANCE:start -->
...
<!-- BM_INFOGRAPHIC_PROVENANCE:end -->The provenance records the image mode, theme source, selected visual direction, and image settings. It is for review/debugging context only.
Bossbot verdict.
The skill never merges, never enables auto-merge, and never treats the image or provenance block as a gate. The only required merge signal is the BM Bossbot Approval status on the current PR head SHA.
git status --short --branchmaingh auth statusgh repo view --json nameWithOwner,defaultBranchRef,urlgit commit -sgit push -u origin HEADgh pr view --json number,url,headRefOid,mergeStateStatus,statusCheckRollupgh pr create --fill<theme> is provided, add or update this managed block in the PR body:<!-- BM_INFOGRAPHIC_THEME:start -->
<theme>
<!-- BM_INFOGRAPHIC_THEME:end -->Keep the rest of the PR body intact. The theme is non-gating image guidance only.
.github/workflows/bm-bossbot.yml.BM Bossbot Approval.headRefOid.head SHA.
$fix-pr-issues.Return the PR URL, current head SHA, checks watched, verification run, and the BM Bossbot verdict. Include the image <theme> if one was supplied. Be explicit when any check is still pending.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.