PR Description Writer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited PR Description Writer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill directs the agent to read a diff or a plain summary of changes and produce a complete, well-structured pull request description. It covers what changed, why it changed, how reviewers can test it, and what edge cases or risks to be aware of — so reviewers can do their job without having to chase you for context.
Use this when you're about to open a PR and want a description that will actually get reviewed instead of skipped, or when you need to document a large change for future reference.
Copy this file to .agents/skills/pr-description-writer/SKILL.md in your project root.
Then ask:
You can provide:
git diff main...HEAD or git diff outputPaste the instructions from the section below into your session, then provide your diff or change summary.
When asked to write a pull request description, follow these steps:
Read the diff or change list and identify:
Produce a description with these exact sections:
## Summary 1-3 bullet points. Each bullet is one complete thought. Focus on the what and the why, not the implementation details. Example:
/auth/login endpoint to prevent brute-force attacks## Changes A more detailed breakdown for reviewers. Group related changes together. Use sub-bullets if needed:
server/auth.ts — added checkRateLimit() middleware before the password comparison stepserver/middleware/rateLimiter.ts — new file: generic rate limiter using an in-memory sliding windowtests/auth.test.ts — added 4 new test cases covering the rate limit behavior## Test Plan A checklist of how to verify the change works. Written as concrete steps a reviewer can follow:
npm test — all tests should passPOST /auth/login with valid credentials returns 200POST /auth/login 6 times in 1 minute from the same IP returns 429 on the 6th request## Screenshots or recordings (optional) If the change has a UI component, include this section with a note to attach screenshots. Otherwise omit it.
## Risks and notes Any caveats, known limitations, or things the reviewer should pay special attention to:
/auth/refresh endpoint## Related
formatDate caller in ReportPage.tsx"Produce the PR description in a fenced markdown block so it can be copy-pasted directly into GitHub.
Input to Agent:
"Use the PR Description Writer skill. Here's a summary of my changes: - Added aCopyableCodeBlockcomponent that shows a code block with a copy button - Used it in the JSON Formatter tool to replace the plain<pre>tag - Updated the Header component to add a link to the new AI Resources page This closes issue #88."
Output from Agent:
## Summary
- Adds a reusable `CopyableCodeBlock` component with a one-click copy button for code output
- Replaces the plain `<pre>` tag in the JSON Formatter with `CopyableCodeBlock`, improving usability
- Adds an AI Resources link to the site header
## Changes
- `client/src/components/CopyableCodeBlock.tsx` — new component: renders a code block with syntax highlighting and a copy-to-clipboard button using the Clipboard API
- `client/src/tools/JsonFormatter.tsx` — replaced `<pre>` output with `<CopyableCodeBlock>`
- `client/src/components/Header.tsx` — added "AI Resources" nav link pointing to `/ai-resources`
## Test Plan
- [ ] Run `npm test` — all tests pass
- [ ] Open the JSON Formatter tool, format some JSON, and verify the copy button copies the output to clipboard
- [ ] Click the copy button twice — verify it shows a "Copied!" confirmation on the first click and resets after 2 seconds
- [ ] Check the header on desktop and mobile — "AI Resources" link should be visible and route correctly
## Risks and Notes
- `CopyableCodeBlock` uses the async Clipboard API — this requires HTTPS or localhost. It will silently fail on plain HTTP (no existing pages served over plain HTTP, so this is fine).
## Related
- Closes #88~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.