submit-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited submit-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automate the "last mile" of the SkillOps pipeline: take validated skill files and create a GitHub Pull Request on the `LaWebcapsule/d9-skills` repo.
Architecture: This skill lives inside the d9-skills plugin itself. When triggered, it clones a fresh copy of d9-skills to a temp directory, creates a branch, copies the validated skill file, and opens a PR. This ensures the user's local plugin installation is never modified.
Target repo: https://github.com/LaWebcapsule/d9-skills
Activate when ALL of the following are true:
format-skill and scored >= 10 by quality checkAlso activate when:
format-skill finishes (intercept and automate the submission)The skill file should already be written and validated by the preceding pipeline steps. Confirm with the user:
Ready to submit to LaWebcapsule/d9-skills:
NEW: <name>/SKILL.md (score: <N>/20)
Session tokens: ~<N>
Submit? [Yes] [Edit first] [Cancel]Run the verification script on the skill file:
node "${CLAUDE_PLUGIN_ROOT}/scripts/verify-skill-structure.mjs" "<path-to-skill-dir>"If score < 10, STOP and hand off to refine-skill-design.
TMPDIR=$(mktemp -d)
gh repo clone LaWebcapsule/d9-skills "$TMPDIR/d9-skills"
cd "$TMPDIR/d9-skills"git checkout -b skill/<primary-skill-name>
# Copy the validated skill file into the repo
mkdir -p skills/<name>
cp <validated-skill-path>/SKILL.md skills/<name>/SKILL.mdgit add skills/<name>/
git commit -m "skill: add <name>"
git push -u origin skill/<name>For a single skill: skill: add crlf-docker-entrypoint For multiple: skill: add crlf-docker-entrypoint, pnpm-ci-true-docker For amendments: skill: amend rebuild-plugins-before-deploy
gh pr create \
--repo LaWebcapsule/d9-skills \
--head skill/<name> \
--title "skill: add <name>" \
--body "<generated body>"PR body structure:
## Summary
- <count> new skill(s) / amendment(s) from a d9 debugging session
- <bullet point per skill with 1-line description>
## Token Economy
| Skill | Session Tokens | Est. Tokens Saved per Use |
|-------|---------------|--------------------------|
| <name> | <session_tokens from metadata> | <estimated> |
> Every time a developer avoids this debugging session thanks to this skill,
> the community saves approximately <total est.> tokens.
## Test plan
- [ ] Review each SKILL.md for accuracy
- [ ] Check anonymization (no PII, secrets, project names)
- [ ] Verify SKILL.md follows Agent Skills Open Standard
- [ ] Confirm PR contains ONLY skill files
Generated with [SkillOps Pipeline](https://github.com/LaWebcapsule/d9-skills)rm -rf "$TMPDIR"Show confirmation:
PR created successfully!
URL: https://github.com/LaWebcapsule/d9-skills/pull/<N>
Target repo: LaWebcapsule/d9-skills
Branch: skill/<name>
Skills: <list>
Session tokens: <total> (recorded in skill metadata)
Your working directory is unchanged.
The curate-on-pr CI on d9-skills will run automatically.
Install: npx skills add LaWebcapsule/d9-skillsLaWebcapsule/d9-skills — hardcoded, not configurableskill/crlf-docker-entrypoint over skill/newgh CLI is not available, show manual instructionsname matches directory name?skill: add/amend <name>)?LaWebcapsule/d9-skills repo?--head flag with gh pr create?Ready to submit to LaWebcapsule/d9-skills:
NEW: crlf-docker-entrypoint/SKILL.md (score: 19/20)
Session tokens: ~45,000
Will clone LaWebcapsule/d9-skills to temp, create branch skill/crlf-docker-entrypoint,
copy skills/crlf-docker-entrypoint/SKILL.md, commit, push, and open PR.
Your working directory is NOT affected.
Proceed? [Yes] [Edit first] [Cancel]User says Yes:
gh CLI not found. Manual steps:
1. Clone: git clone https://github.com/LaWebcapsule/d9-skills.git /tmp/d9-skills
2. Branch: cd /tmp/d9-skills && git checkout -b skill/crlf-docker-entrypoint
3. Copy: cp <path>/SKILL.md skills/crlf-docker-entrypoint/SKILL.md
4. Commit: git add skills/ && git commit -m "skill: add crlf-docker-entrypoint"
5. Push: git push -u origin skill/crlf-docker-entrypoint
6. Open PR: https://github.com/LaWebcapsule/d9-skills/compare/skill/crlf-docker-entrypoint~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.