finishing-a-development-branch — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited finishing-a-development-branch (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- Adapted from obra/superpowers — tessera-verify compliance gate added before Step 1 -->
Announce at start: "I'm using the finishing-a-development-branch skill to complete this work."
If tessera MCP is configured AND a plan was registered with `plan_save`:
Run the tessera-verify skill BEFORE verifying tests:
1. Run tessera-verify
2. Review compliance report
- All checklist items done?
- All target files in git diff?
3. If gaps: complete missing implementation before proceedingOnly after tessera-verify is clean: proceed to Step 1.
# Python: uv run pytest
# Node: npm test
# Go: go test ./...If tests fail:
Tests failing (<N> failures). Must fix before completing.Stop. Don't proceed to options.
GIT_DIR=$(cd "$(git rev-parse --git-dir)" 2>/dev/null && pwd -P)
GIT_COMMON=$(cd "$(git rev-parse --git-common-dir)" 2>/dev/null && pwd -P)git merge-base HEAD main 2>/dev/null || git merge-base HEAD master 2>/dev/nullNormal repo / named-branch worktree:
Implementation complete. What would you like to do?
1. Merge back to <base-branch> locally
2. Push and create a Pull Request
3. Keep the branch as-is (I'll handle it later)
4. Discard this work
Which option?Detached HEAD:
1. Push as new branch and create a Pull Request
2. Keep as-is (I'll handle it later)
3. Discard this workOption 1 — Merge locally:
MAIN_ROOT=$(git -C "$(git rev-parse --git-common-dir)/.." rev-parse --show-toplevel)
cd "$MAIN_ROOT"
git checkout <base-branch> && git pull && git merge <feature-branch>Run tests on merged result. Only on success: cleanup worktree, delete branch.
Option 2 — Push and create PR:
git push -u origin <feature-branch>
gh pr create --title "<title>" --body "$(cat <<'EOF'
## Summary
<2-3 bullets>
## Test Plan
- [ ] <verification steps>
EOF
)"Do NOT clean up worktree — user needs it for PR feedback.
Option 3 — Keep as-is: Report: "Keeping branch <name>."
Option 4 — Discard: Require typed "discard" confirmation before deleting anything.
Only clean up worktrees created by this skill (under .worktrees/, worktrees/, or ~/.config/superpowers/worktrees/). Never remove harness-owned workspaces.
cd "$MAIN_ROOT"
git worktree remove "$WORKTREE_PATH"
git worktree pruneNever:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.