watch — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited watch (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Plugin root:<plugin_root>/skills/watch/SKILL.md— scripts live at<plugin_root>/bin/ci-sentinel.shandbin/read-notifications.sh.
Use gh repo view --json nameWithOwner --jq .nameWithOwner to get the <owner>/<repo> slug for the current directory. If gh is missing or the repo has no GitHub remote, tell the user to set one up and stop.
If the user said "stop" / --stop:
bash <plugin_root>/bin/ci-sentinel.sh --repo <owner/repo> --stopOtherwise start a single poll cycle:
bash <plugin_root>/bin/ci-sentinel.sh --repo <owner/repo> [--pr <N>]For backgrounded polling, wrap in nohup and a wait loop on the caller's side. The sentinel itself is one-shot per invocation — each run polls the named PR(s) once and writes notification entries to ~/.claude/nyann/notifications/<repo-hash>.jsonl.
After polling (or whenever the user asks "what's new on my PRs?"):
bash <plugin_root>/bin/read-notifications.sh --repo <owner/repo>This reads all queued notifications and truncates the file. Use --peek if you want to leave the queue intact.
Render the result as a short list:
[nyann] 2 notifications since last check:
- PR #42: CI failed (2h ago)
- PR #43: approved (15m ago)wait-for-pr-checks (blocking).ship (PR + merge in one step).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.