branch-finishing — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited branch-finishing (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Purpose: Ensures every feature branch is cleanly rebased, reviewed, and merged without introducing regressions or leaving stale local state behind.
git diff main...HEAD and read every changed line; catch debug prints, commented-out code, and accidental file inclusions yourself first.wip:, fixup!, or tmp: commits so the branch history is clean; use git rebase -i to consolidate.Closes #NNN or Fixes #NNN in the PR body so the linked issue auto-closes on merge; never leave issues open manually after a successful merge.CHANGELOG.md (or the project's equivalent) before marking the PR ready for review.gh pr ready <number> to convert from draft; do not rely on reviewers noticing a draft PR that was silently updated.git push origin --delete <branch> or enable auto-delete in repository settings; stale remote branches pollute the branch list.git branch -d <branch> to keep the local workspace clean.main locally and run the test suite once to confirm the integrated state is green; do not assume CI on the PR branch is sufficient.git rebase to maintain a linear history unless the team explicitly requires merge commits.skills/git-conventions/SKILL.mdskills/review-deployment/SKILL.md~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.