javiertarazon/prepare-pr
.github/skills/prepare-pr/SKILL.md
Script-first PR preparation with structured findings resolution, deterministic push safety, and explicit gate execution.
testing
Updated Apr 6, 2026
$ install --global
skillsauthnpx skillsauth add javiertarazon/agente-codex prepare-prInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 6, 2026, 2:10 AM28.6s3 files scanned
SKILL.md
- name:
- prepare-pr
- description:
- Script-first PR preparation with structured findings resolution, deterministic push safety, and explicit gate execution.
Prepare PR
Overview
Prepare the PR head branch for merge after /review-pr.
Inputs
- Ask for PR number or URL.
- If missing, use
.local/pr-meta.envif present in the PR worktree.
Safety
- Never push to
main. - Only push to PR head with explicit
--force-with-leaseagainst known head SHA. - Do not run
git clean -fdx. - Wrappers are cwd-agnostic; run from repo root or PR worktree.
Execution Contract
- Run setup:
scripts/pr-prepare init <PR>
- Resolve findings from structured review:
.local/review.jsonis mandatory.- Resolve all
BLOCKERandIMPORTANTitems.
-
Commit with required subject format and validate it.
-
Run gates via wrapper.
-
Push via wrapper (includes pre-push remote verification, automatic lease-retry, post-push API propagation retry).
Optional one-shot path:
scripts/pr-prepare run <PR>
Steps
- Setup and artifacts
scripts/pr-prepare init <PR>
ls -la .local/review.md .local/review.json .local/pr-meta.env .local/prep-context.env
jq . .local/review.json >/dev/null
- Resolve required findings
jq -r '.findings[] | select(.severity=="BLOCKER" or .severity=="IMPORTANT") | "- [\(.severity)] \(.id): \(.title) => \(.fix)"' .local/review.json
- Update changelog/docs
jq -r '.changelog' .local/review.json
jq -r '.docs' .local/review.json
- Commit scoped changes
Required commit subject format:
fix: <summary> (openclaw#<PR>) thanks @<pr-author>
Use:
source .local/pr-meta.env
scripts/committer "fix: <summary> (openclaw#$PR_NUMBER) thanks @$PR_AUTHOR" <file1> <file2> ...
scripts/pr-prepare validate-commit <PR>
- Run gates
scripts/pr-prepare gates <PR>
- Push safely to PR head
scripts/pr-prepare push <PR>
- Verify handoff artifacts
ls -la .local/prep.md .local/prep.env
Guardrails
- Do not run
gh pr mergein this skill. - Do not delete worktree.
Workflow completo
Ver PR_WORKFLOW.md para el flujo completo review → prepare → merge.
Related Skills
javiertarazon/.github/skills/windows-admin
development
VerifiedTrustedCommunity
# SKILL: windows-admin ## Dominio Administración elevada de Windows: servicios, pagefile, Windows Update, BCD, EFI, drivers AHCI, WinRE, registro del sistema y operaciones `RunAs`. --- ## Scripts disponibles (en `.codex-agent/`) | Script | Propósito | Riesgo | |--------|-----------|--------| | `windows_light_admin.ps1` | Optimizar SO: pagefile, servicios bloat, bloqueo de WU | `high` | | `boot_remediation_admin.ps1` | Reparar BCD, drivers AHCI, respaldar EFI, habilitar WinRE | `high` | | `ru
SKILL.mdUpdated Apr 6, 2026
javiertarazon/tmux
tools
VerifiedTrustedCommunity
Remote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.
SKILL.mdUpdated Apr 6, 2026
javiertarazon/tmux
tools
VerifiedTrustedCommunity
Remote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.
SKILL.mdUpdated Apr 6, 2026
javiertarazon/.github/skills/task-tracker
development
VerifiedTrustedCommunity
# SKILL: task-tracker ## Dominio Gestión completa de la cola de tareas del workspace. Crear, actualizar, cerrar tareas en `.codex-agent/tasks.yaml` y registrar cada acción en `.codex-agent/audit-log.jsonl`. Mantener `.codex-agent/RESUME.md` actualizado para reanudación de sesión. --- ## Archivos del plano de control | Archivo | Propósito | |---------|-----------| | `.codex-agent/tasks.yaml` | Cola de tareas con estado, riesgo y pasos | | `.codex-agent/audit-log.jsonl` | Registro inmutable de
SKILL.mdUpdated Apr 6, 2026