create-pr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-pr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyzes git changes between the current branch and the default branch to verify branch hygiene, inspect code modifications, and generate a clear, focused pull request description. Finally, automates PR creation using the GitHub CLI (gh).
README.md, AGENTS.md, and CLAUDE.md with md-docs before writing the PR if those files are stale or should reflect the final reviewed state of the branch.main or master).git checkout -b <feature-branch-name>) before proceeding. Do not build a PR directly off the default branch.git status --porcelain to check for uncommitted modifications. If any exist, warn the user and recommend committing them before generating the PR.README.md, AGENTS.md, or CLAUDE.md should change based on the final reviewed branch state.md-docs first and complete those documentation updates before generating the PR summary.gh command-line tool is installed and authenticated.main or master) via remote configuration (git remote show origin) or branch listing.git log <default-branch>..HEAD).git diff <default-branch>...HEADgh pr create CLI command using the approved title and body.Provide two separate outputs when presenting the generated PR description to the user:
The body must follow this structure exactly:
[1-2 sentence overview paragraph explaining the purpose and motivation of the changes.]
## Description
- **What**: Clear explanation of the changes introduced.
- **Why**: Context on why these changes are necessary (include links to Linear tasks or issue trackers if applicable).
- **How**: Brief explanation of the technical approach taken.
## Changes
- **[Component/Area]**: High-level context of what changed, including why and how. Use repository-relative paths (e.g., `lib/auth/session.go`) to reference key files.
- **[Component/Area]**: High-level context of what changed.
## Key Decisions & Breaking Changes
[Deep-dive into key architectural decisions, trade-offs, and an explicit call-out of any API modifications or breaking modifications.]Do:
Don't:
/Users/username/...).Title: Migrate API service to multi-stage Docker build on AWS ECS Fargate via Terraform
Body:
Migrates the core API service deployment from a single-stage Docker build to a multi-stage container running on AWS ECS Fargate, managed by Terraform.
## Description
- **What**: Optimized the container image size via multi-stage Docker builds and updated the deployment infrastructure on AWS.
- **Why**: The previous container image was 1.2GB, causing slow ECS task startups. We also need to move to Fargate to eliminate EC2 host management overhead. (Linear: DEVOPS-412)
- **How**: Created a multi-stage `Dockerfile` to produce a 45MB runtime image, and updated our Terraform modules to provision the Fargate task definition and service.
## Changes
- **Containerization**: Updated `docker/Dockerfile` to use a two-stage build (build on `golang:1.21-alpine`, run on `alpine:3.19`), dropping root privileges for the runtime process.
- **Infrastructure**: Modified `terraform/ecs_service.tf` to define the Fargate capacity provider, security groups, and updated environment variables.
## Key Decisions & Breaking Changes
- **Non-root container user**: The runtime container now runs as a non-root user (`appuser`). If any local file writing is needed in future tasks, it must write to `/tmp`.
- **Breaking Change**: The Terraform variable `ecs_instance_type` has been removed as Fargate manages resources using cpu/memory configuration at the task level.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.