create-pr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-pr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create a PR a reviewer can understand without reading the conversation. Use extra invocation text and session findings to explain the problem, final behavior, and evidence. Follow the user's requested format and the target repo's guidance.
git status, staged changes, and the current branch.branch already contains the requested changes.
fetch that remote and fast-forward the local base with git merge --ff-only <remote>/<base>. Preserve dirty work and stop if fast-forwarding fails. Do not reset it away.
/simplify on the staged diff before committing and apply its findings. Docs-onlydiffs are a no-op. Follow commit-staged for any staged changes.
git diff <remote>/<base>...HEAD across all commits. For an existing PR, use itsactual base and head, or gh pr diff <pr> if this checkout is on another branch.
the final change, including links, counts, errors, and benchmark provenance.
update-pr-summaryrather than opening a duplicate.
--body-file to gh.Never interpolate text into a shell command or include command output by accident.
--title, --body-file, and -a @me.gh pr list --repo <owner>/<repo> --author @me --limit 5 --json reviewRequests.
gh pr view <pr> --json title,body,url.Check code fences, tables, links, and preserved media. For visual changes, open the PR and verify the images render. Report the URL and any incomplete verification.
Fix copied session text losing line breaks. No type prefix, internal brand names, or vague claims. Rewrite the title and body when the final scope changes.
does the fix matter? For a feature, show what the user can now do. Skip "This PR" openers.
paragraph or cut useful evidence to satisfy a word count. Small changes may need only one sentence and a snippet. Use short sections when reproduction, fix, and results need separation. Omit empty or boilerplate sections.
behavior, then explain how the final change fixes it. Use exact logs where they show the failure. Skip setup noise, raw tool output, and the debugging diary.
or separately labeled fenced Before and After outputs. Prefer these to red/green diff lines that force the reviewer to infer the outcome. Do not force snippets onto copy edits.
workload, or sample count needed to interpret them. Link relevant issues, commits, docs, and result artifacts where they support the claim, rather than listing changed files.
material limitations or pre-existing failures. A future test checklist is not evidence. Do not claim full-run success from a focused check, or understate verified full runs.
counts or base-branch noise when they help distinguish the actual review scope.
viewport and scenario, and inspect the visuals before using them. Analysis/plot changes need representative outputs and measured results readable at the displayed size.
repo's hosting rules. Where release uploads are permitted, use an existing appropriate release and embed its asset URLs. Preserve existing GitHub attachment URLs as well.
paths, the PR link, and the sentence/table cell where each image belongs for manual upload. Do not invent attachment URLs or claim pending uploads are visible.
and still-valid evidence unless the user asks to remove them. Edit the relevant portion rather than replacing the whole body. Keep proof in the body instead of duplicating it in a separate comment.
Copying a multiline command into a session loses its line breaks.
| Before | After |
|---|---|
| Pasted command becomes one line | Original line breaks survive |
- Preserve clipboard newlines at paste time
- Reuse the existing text insertion path
**Reproduce**printf 'first\nsecond\n' | pbcopy
**Checked:** paste regression passes for multiline and single-line commands.Adapt this shape to the evidence. For UI changes, comparison cells should carry the actual screenshots/GIFs. For long outputs, use separate fenced blocks outside the table.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.