avifenesh/pr-sweep
skills/pr-sweep/SKILL.md
Sweep open PRs across all repos: triage, rebase stale branches, fix review comments, report what's ready for owner to merge. Use when idle loop detects open PRs, on cron schedule, or when asked to check PRs. Keywords: PR sweep, open PRs, stale PRs, review comments, rebase, triage, merge ready
$ install --global
skillsauthnpx skillsauth add avifenesh/cairn pr-sweepInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 12, 2026, 3:10 AM41.2s1 file scanned
SKILL.md
- name:
- pr-sweep
- description:
- Sweep open PRs across all repos: triage, rebase stale branches, fix review comments, report what's ready for owner to merge. Use when idle loop detects open PRs, on cron schedule, or when asked to check PRs. Keywords: PR sweep, open PRs, stale PRs, review comments, rebase, triage, merge ready
- inclusion:
- on-demand
- context:
- tick
- allowed-tools:
- cairn.shell,cairn.readFile,cairn.editFile,cairn.writeFile,cairn.searchFiles,cairn.gitRun,cairn.publishToFeed
PR Sweep
Sweep open PRs across all repos owned by avifenesh. Triage, fix, and report.
Constraints
- You are
agent-cairn. You CANNOT merge PRs — only the owner (avifenesh) can merge. - Never force-push to someone else's PR branch.
- Never close PRs without explicit owner instruction.
- Dependabot PRs: rebase if behind, but do NOT merge — report as "ready for owner merge."
Steps
1. Discover open PRs
gh search prs --owner avifenesh --state open --json repository,number,title,author,createdAt,isDraft --limit 50
Group by repo. Skip archived repos.
2. For each PR, gather state
gh pr view <NUMBER> --repo <OWNER/REPO> --json state,mergeable,mergeStateStatus,reviewDecision,statusCheckRollup,headRefName,isDraft
Classify:
- Ready: CI green + mergeable + no unresolved comments → report to owner
- Behind: mergeable but behind main → update branch (
gh pr update-branch) - CI failing: check if failure is related to PR changes or flaky
- Has comments: unresolved review threads → attempt to fix if they're on agent-cairn's own PR
- Conflicts: needs rebase → attempt rebase if it's agent-cairn's branch
- Draft: skip unless stale >7 days
- Stale: no activity >3 days → flag for owner attention
3. Fix what you can (agent-cairn PRs only)
For PRs authored by agent-cairn:
Rebase behind branches:
gh pr update-branch <NUMBER> --repo <OWNER/REPO>
Address review comments:
- Fetch comments:
gh api repos/<OWNER/REPO>/pulls/<NUMBER>/comments - Read the diff:
gh pr diff <NUMBER> --repo <OWNER/REPO> - If comments are actionable code fixes: check out the branch, fix, push
- If comments are questions or architectural: leave a reply explaining
Do NOT fix if:
- PR is by an external contributor (not agent-cairn)
- Comments require architectural decisions (flag for owner)
- Fix would require changes outside the PR's scope
4. Report via Telegram
Send a compact summary. Format:
PR Sweep Report
Ready for merge (owner action needed):
avifenesh/cairn #441 — Bedrock role alternation [CI green, mergeable]
avifenesh/agnix #692 — Dep bump [CI green, mergeable]
Fixed (rebased/comments addressed):
avifenesh/cairn #422 — Mask 5xx errors [rebased, 3 comments fixed, CI running]
Needs attention:
avifenesh/cairn #368 — Rate limiting [8 comments, conflicts, needs rework]
Stale (>3 days, no activity):
avifenesh/cairn #367 — Sanitize errors [5 days, conflicts, overlaps #422]
Only send if there are actionable items. Skip if all PRs are drafts or already reported.
5. Track reported PRs
Use memory to avoid re-reporting the same PR state:
cairn.searchMemory("pr sweep last report")
Only notify again if state changed (new comments, CI flip, became mergeable).
Noise Rules
- Dependabot PRs with passing CI: batch into one line "N dep bumps ready"
- Your own (agent-cairn) pushes: never notify
- Bot review comments (Copilot, Gemini, Codex): classify as "bot suggestions" not blockers
- PR lifecycle events (labeled, assigned, review requested): skip entirely
Related Skills
avifenesh/pr-stall-detector
data-ai
VerifiedTrustedCommunity
Detect agent-cairn PRs that have stalled (no activity >=90 min) and classify the failure mode to route to appropriate recovery agent.
4SKILL.mdUpdated Apr 12, 2026
avifenesh/installer
tools
VerifiedTrustedCommunity
Post-install skill adaptation: read a newly installed SKILL.md, fix environment-specific references (paths, accounts, tool names), assign the skill to relevant agent types, and propose an AGENTS.md update. Triggered automatically after cairn.installSkill completes.
4SKILL.mdUpdated Apr 12, 2026
avifenesh/growth-brief
data-ai
VerifiedTrustedCommunity
Monthly self-improvement brief for Cairn. Queries error_patterns, action_exemplars, experiment_windows, and session_journal to synthesize what Cairn learned, where it failed, and 3 concrete proposals for Avi to approve. Run on the 1st of each month. Keywords: growth brief, monthly review, self-improvement, what did cairn learn, how is cairn doing, monthly report
4SKILL.mdUpdated Apr 12, 2026
avifenesh/decision-support
testing
VerifiedTrustedCommunity
Decision support with memory-backed context. Retrieves past decisions, journal history, and relevant facts before answering questions that involve a choice or tradeoff. Keywords: should I, which is better, tradeoff, compare, decide, choose, option, alternative, pros and cons, recommend
4SKILL.mdUpdated Apr 12, 2026