mr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
why-not-mechanizable: skill workflow guidance; each step requires understanding the surrounding context (repo, task shape, prior state).
(review-time: see section note).gitlab-ci.yml (-> glab) or .github/ (-> gh) (review-time: see section note)(review-time: see section note)main (review-time: see section note)develop (review-time: see section note)(review-time: see section note)git log <base>..HEAD and git diff <base>...HEAD to understand the full changeset (review-time: see section note)^(feat|fix|chore|docs|test|refactor|perf|style|build|ci|revert)(\(.+\))?!?: .+. If any commit fails, stop and ask the user to amend or rewrite the commit history. Do not proceed. (review-time: see section note)(review-time: see section note)-u flag (review-time: see section note)(review-time: see section note)(review-time: see section note)^(feat|fix|chore|docs|test|refactor|perf|style|build|ci|revert)(\(.+\))?!?: .+ (review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)gh pr create / glab mr create until that explicit confirmation arrives (review-time: see section note)(review-time: see section note).github/pull_request_template.md or .gitlab/merge_request_templates/ exists, use that template (review-time: see section note)~/.claude/pull_request_template.md (review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note)If the target branch is not the default branch (main/master/develop), check for a base MR/PR:
GitLab:
glab mr list --source-branch <target-branch> (review-time: see section note)(review-time: see section note) glab api --method POST "projects/<url-encoded-project-path>/merge_requests/<our-iid>/blocks" \
-f "blocking_merge_request_iid=<base-mr-iid>"(review-time: see section note)> **Stacked MR**: depends on !<base-iid>. Retarget to main after !<base-iid> is merged. (review-time: see section note)GitHub:
gh pr list --head <target-branch> --json number,title --jq '.[0]' (review-time: see section note)Depends on #<base-pr-number> in the PR description (under Linked Issues or similar). This is a widely recognized convention that third-party apps (e.g., Dependent Issues, PR Dependencies) can enforce via status checks. (review-time: see section note)> **Stacked PR**: depends on #<base-pr-number>. Retarget to main/develop after #<base-pr-number> is merged. (review-time: see section note)(review-time: see section note)gh pr create / glab mr create), not MCP tools or APIs (except glab api for MR dependencies - glab mr create has no dependency flag) (review-time: see section note)(review-time: see section note)(review-time: see section note)(review-time: see section note).claude/state/, etc.) in the MR/PR description - they only have value locally and mean nothing to reviewers (review-time: see section note)--yes or any other non-interactive auto-accept flag to glab mr create / gh pr create (review-time: see section note)(review-time: see section note)glab mr create / gh pr create invocation. Related operations that happen before it - pushing the branch, drafting the body, transitioning the Jira ticket - do not need a separate prompt once MR creation itself has been approved in the same turn (review-time: see section note)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.