fix-issue-github-auto — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fix-issue-github-auto (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Fully automate resolving a GitHub issue: create a linked branch, apply code changes, commit, open a PR, and resolve any conflicts.
$ARGUMENTS is the issue number. If $ARGUMENTS is empty, ask the user to provide an issue number and stop.
Steps:
gh is installed and authenticated by running gh auth status. If not, tell the user and stop. Run gh issue view $ARGUMENTS --json title,state to confirm the issue exists and is open. If it doesn't exist or is already closed, tell the user and stop.gh issue develop is available by running gh issue develop --help 2>/dev/null. Then:gh issue develop $ARGUMENTS --checkout. GitHub names the branch <number>-<issue-title-slug> automatically and links it to the issue.12-add-decision-command). Run git checkout -b <branch-name>.gh issue view $ARGUMENTS --json title,body,comments,labels to fetch the full issue context. Analyse the title, body, and comments to understand what is being requested. Explore the codebase to find the relevant files, reading them to understand the current implementation before making any changes. Apply the minimum code changes needed to resolve the issue — fix bugs by correcting the root cause, add features by following existing patterns, and do not refactor or change unrelated code.git diff --staged --stat to check for staged changes. If nothing is staged, run git add -A to stage everything. Run git diff --staged to review what will be committed. Run ls CHANGELOG.md 2>/dev/null — if a changelog exists, regenerate the ## Unreleased section treating the new changes as already included, write it back to CHANGELOG.md, and run git add CHANGELOG.md. Write a commit message in Conventional Commits format (type(scope): short description, imperative tense, under 72 characters). Commit immediately with git commit -m "...".gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name'. Check if an upstream is set with git rev-parse --abbrev-ref --symbolic-full-name @{upstream} 2>/dev/null. If not set, run git push -u origin HEAD. If set, run git push. Run git log --oneline <base>..HEAD and git diff <base>...HEAD --stat to understand the branch changes. Derive a PR title (imperative tense, under 72 chars) and description from the commits and issue context. Include Closes #$ARGUMENTS in the PR body to link the issue. Check if a PR already exists with gh pr view --json url,number 2>/dev/null. If no PR exists, run gh pr create --title "<title>" --body "<description>". If one exists, run gh pr edit --title "<title>" --body "<description>".gh pr view --json mergeable --jq '.mergeable'. If the result is CONFLICTING:git fetch origin then git rebase origin/<base>.git diff --name-only --diff-filter=U to list conflicting files. For each file, read it, resolve conflicts by merging both sides if both changes are needed, preferring incoming (theirs) if it supersedes the current change, or keeping current (ours) if the incoming change is unrelated. Run git add <file> after resolving each file. Run git rebase --continue when all conflicts are resolved.git rebase --abort, explain what was ambiguous, and ask the user to resolve it manually.git push --force-with-lease.$ARGUMENTS
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.