create-pr
Creates comprehensive GitHub pull requests with automated quality validation and security scanning. This skill should be used when the user asks to "create a PR", "submit a pull request", or needs to merge completed work with full compliance checks.
What this skill does
# Create GitHub Pull Request Execute automated PR creation workflow with comprehensive quality validation and security scanning. ## Context - Current git status: !`git status` - Current branch: !`git branch --show-current` - Unpushed commits: !`git log --oneline -5` - GitHub authentication: !`gh auth status` - Repository changes: !`git diff --stat HEAD~1..HEAD` ## Requirements Summary Ensure repository readiness with clean state and authentication. Complete all quality checks (lint, test, build, security) before PR creation. Link related issues with auto-closing keywords and apply accurate labels. See `references/requirements.md` for complete checklist. ## Phase 1: Validation and Analysis **Goal**: Validate repository state, analyze changes, detect templates, and identify blockers. **Actions**: 1. Verify GitHub authentication from context 2. Check branch status and unpushed commits 3. Analyze commit history for conventional commit compliance 4. Identify changed files and determine PR scope 5. Check for contributing guidelines (`CONTRIBUTING.md`) and follow its requirements 6. Detect PR templates (`.github/PULL_REQUEST_TEMPLATE.md` or root/docs locations) 7. Detect potential blockers (merge conflicts, missing tests, etc.) See `references/repository-templates.md` for template detection and compliance details. ## Phase 2: Quality and Security Checks **Goal**: Execute comprehensive quality validation and security scanning. **Actions**: 1. Run project-specific quality checks (see `references/quality-validation.md` for commands) 2. Execute security scanning for sensitive files and hardcoded secrets 3. Validate commit message format against standards 4. If checks fail: follow failure resolution process in `references/failure-resolution.md` 5. Re-run all checks until passing ## Phase 3: PR Assembly and Creation **Goal**: Create pull request with proper structure, metadata, and links. **Actions**: 1. Identify and link related issues using GitHub CLI 2. Generate PR title (≤70 chars, imperative, no emojis) 3. Assemble PR body following template in `references/pr-structure.md` 4. Apply automated labels based on file changes 5. Check if targeting a non-default branch (e.g. `develop`), and if so explicitly warn the user that auto-closing keywords will not trigger automatically on merge 6. Create PR using `gh pr create` with all metadata - Use `--draft` if the PR requires early feedback or is not fully complete - Set reviewers with `--reviewer` and assignees with `--assignee` when requested - Fill title/body automatically using `--fill` for simple changes 7. Check remote CI status with `gh pr checks <pr-number> --watch` to ensure all checks pass remotely 8. Report final PR URL and status to user ## References - **Requirements**: `references/requirements.md` - Pre-creation checklist and commit standards - **Repository Templates**: `references/repository-templates.md` - Contributing guidelines and PR templates - **Quality Validation**: `references/quality-validation.md` - Node.js/Python validation commands - **PR Structure**: `references/pr-structure.md` - Title guidelines, body template, labels - **Failure Resolution**: `references/failure-resolution.md` - Agent collaboration for fixing failures - **Examples**: `references/examples.md` - Commit message examples
Related in Security
mac-ops
IncludedComprehensive macOS workstation operations — diagnose kernel panics, identify failing drives, audit launchd startup items, decode wake reasons, triage TCC permission denials, manage APFS snapshots, recover from no-boot. Use for: Mac is slow, slow bootup, won't boot, kernel panic, kernel_task hot, mds_stores CPU, photoanalysisd, cloudd, login loop, gray screen, sleep wake failure, drive failing, IO errors, APFS snapshots eating space, Time Machine local snapshots, Spotlight indexing, launchd, LaunchAgent, LaunchDaemon, login items, TCC permissions, Full Disk Access, Screen Recording denied, Gatekeeper, quarantine, com.apple.quarantine, app is damaged, helper tool, /Library/PrivilegedHelperTools, pmset, wake reasons, dark wake, sysdiagnose, panic.ips, DiagnosticReports, configuration profile, MDM profile, remote diagnostics over SSH.
a11y-audit
IncludedRun accessibility audits on web projects combining automated scanning (axe-core, Lighthouse) with WCAG 2.1 AA compliance mapping, manual check guidance, and structured reporting. Output is configurable: markdown report only, markdown plus machine-readable JSON, or markdown plus issue tracker integration. Use this skill whenever the user mentions "accessibility audit", "a11y audit", "WCAG audit", "accessibility check", "compliance scan", or asks to check a web project for accessibility issues. Also trigger when the user wants to verify WCAG conformance or map findings to a specific standard (CAN-ASC-6.2, EN 301 549, ADA/AODA).
erpclaw
IncludedAI-native ERP system with self-extending OS. Full accounting, invoicing, inventory, purchasing, tax, billing, HR, payroll, advanced accounting (ASC 606/842, intercompany, consolidation), and financial reporting. 413 actions across 14 domains, 43 expansion modules. Constitutional guardrails, adversarial audit, schema migration. Double-entry GL, immutable audit trail, US GAAP.
assess
IncludedAssesses and rates quality 0-10 across multiple dimensions (correctness, maintainability, security, performance, testability, simplicity) with pros/cons analysis. Compares against project conventions and prior decisions from memory. Produces structured evaluation reports with actionable improvement suggestions. Use when evaluating code, designs, architectures, or comparing alternative approaches.
spring-boot-security-jwt
IncludedProvides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based access control using Spring Security 6.x. Use when implementing authentication or authorization in Spring Boot applications.
code-hardcode-audit
IncludedDetect hardcoded values, magic numbers, and leaked secrets. TRIGGERS - hardcode audit, magic numbers, PLR2004, secret scanning.