paulund/dev-commit-push-pr
dev-commit-push-pr/SKILL.md
Use when the user wants to commit staged or unstaged changes, push a branch, and open a pull request in one step.
$ install --global
skillsauthnpx skillsauth add paulund/ai dev-commit-push-prInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 5, 2026, 6:41 AM130.4s1 file scanned
SKILL.md
- name:
- dev-commit-push-pr
- description:
- Use when the user wants to commit staged or unstaged changes, push a branch, and open a pull request in one step.
- category:
- dev
Core Workflow
- Gather current state by running in parallel:
git status,git diff HEAD,git branch --show-current. - If on
main, create a new descriptive branch and check it out. - Run backend checks
composer run test, if any issues then run the composer scripts to fix. - Run frontend checks
npm test, if any issues then run the npm scripts to fix. - If E2E tests exist (
npm run test:e2e), run them. If any tests fail then investigate and fix the root cause. Re-run until all E2E tests pass. - Stage all relevant changes and create a single commit with a clear, conventional message.
- Push the branch to origin.
- Open a pull request using
gh pr createwith a concise title and description summarising the changes.
Constraints
MUST DO
- Create a new branch if currently on main before committing.
- Write a commit message that accurately reflects the changes.
- Complete all steps (branch, commit, push, PR) in a single pass.
- All quality gates (backend, frontend, E2E) must pass before committing.
MUST NOT DO
- Commit to the main branch directly.
- Push without first creating a commit.
- Open a PR without pushing the branch to origin first.
Related Skills
paulund/quality-gate
development
VerifiedTrustedCommunity
Use when the user wants to run the project's lint + types + build sequence as a gate before pushing, opening a PR, or merging. Invoked by chained dev skills between phases. Trigger phrases - "/quality-gate", "run the quality gate", "check it builds".
2SKILL.mdUpdated May 10, 2026
paulund/pr-verify
tools
VerifiedTrustedCommunity
Use when the user wants to verify a PR's feature works at runtime by booting the dev server, exercising the affected UI via Chrome DevTools MCP, and posting a screenshot summary back to the PR. Idempotent — skips if `verified` or `verify-failed` is already on the PR. Trigger phrases - "/pr-verify", "verify this PR", "runtime check the pr".
2SKILL.mdUpdated May 10, 2026
paulund/pr-security-review
testing
VerifiedTrustedCommunity
Use when the user wants a security-focused review pass on a PR with findings actioned as commits on the same branch. Trigger phrases - "/pr-security-review", "security review and fix".
2SKILL.mdUpdated May 10, 2026
paulund/pr-open
testing
VerifiedTrustedCommunity
Use when the user wants to open a pull request for an already-pushed branch that implements a specific issue. Idempotent — returns the existing PR if one is already open for the branch. Trigger phrases - "/pr-open", "open the pr", "create pr for this branch".
2SKILL.mdUpdated May 10, 2026