Is gh-create-pr safe to install?

SaferSkills independently audited gh-create-pr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.agents/skills/gh-create-pr/SKILL.md · 1 file

.agents/skills/gh-create-pr/SKILL.md1.9 KB · Markdown

name: gh-create-pr

description: Create or update GitHub pull requests with the GitHub CLI (`gh`) using the repository PR template. Use when asked to open a PR, fix PR description formatting, align description with `.github/PULL_REQUEST_TEMPLATE.md`, or prepare a merge-ready PR with validation results.

GH Create PR

Workflow

Confirm branch and working tree are ready.

Run git status -sb.
Ensure commits are complete and branch is pushed.

Collect PR context.

Read .github/PULL_REQUEST_TEMPLATE.md when present.
Gather summary of changes and executed checks from commits and task artifacts.
Prefer factual check results and avoid claiming manual tests that were not run.

Create or update PR with gh.

Create:

gh pr create --base main --head <branch> --title "<title>" --body-file <body.md>

Update existing PR description:

gh pr edit <number-or-url> --body-file <body.md>

Use template-accurate checkboxes.

Mark only items that were actually completed.
Leave unchecked items for unperformed steps.
Keep wording from the template unchanged; only fill values/check states.

Verify PR state.

Open or print PR URL from gh output.
Optionally run:

gh pr view <number-or-url> --json number,title,url,headRefName,baseRefName

Body Authoring Rules

Keep description short and concrete.
Include changed areas, bug/task ID when available, and validation commands.
Mention warnings or non-blocking caveats if present.
Do not include markdown sections not in the template when template compliance is requested.

Fast Patterns

Template-first PR update:

Read template.
Create body.md following the exact headings/order.
Apply with gh pr edit <pr> --body-file body.md.

New PR from current branch:

Build body.md from template.
Run gh pr create --base main --head $(git branch --show-current) ....

gh-create-pr— agent skill

Is gh-create-pr safe to install?

GH Create PR

Workflow

Body Authoring Rules

Fast Patterns

Audit the pieces. Scan the whole. Decide.