360 Secure SkillHub
360 安全技能中心

PR + Commit Workflow

该 Skill 面向使用编码 Agent 的提交与 PR 场景:以 references 中的 commit 格式、PR 模板与流程清单为准则,要求读取仓库 AGENTS.md 或 PROCESS.md,强制用户提供人工撰写的 PR 意图且不得代写,用 /tmp 存放 PR 草稿并通过 gh pr edit 更新,可选调用脚本收集环境元数据。

joshp123
joshp123
热度 90.11
最近更新 2026-05-19 06:54:14
分类:开发依赖:代码执行 / 读写文件 / 第三方 API应用场景:代码审查 / 工作流 / DevOps / 模板

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add pr-commit-workflow
Metadata
name
pr-commit-workflow
description
This skill should be used when creating commits or pull requests, enforcing a human-written PR structure, intent capture, and evidence in agentic workflows.

PR + Commit Workflow

Overview

Enforce a high-signal commit workflow and a human-written PR format. Keep global process rules as source of truth and make PRs reviewable by humans and agents.

Workflow Decision Tree

  • If the task is about commits only, follow references/workflow-commit.md.
  • If the task involves PR creation or PR updates, follow references/workflow-pr.md.

Global Rules

  • If the repo has AGENTS.md or docs/agents/PROCESS.md, read it for repo-specific rules.
  • Require user-supplied, human-written intent for every PR. Never generate or paraphrase this text.
  • Use /tmp for PR body drafts and gh pr edit --body-file for updates.

Commit Workflow (entry point)

  • Execute the steps in references/workflow-commit.md.
  • Use the message format in references/commit-format.md.

PR Workflow (entry point)

  • Execute the steps in references/workflow-pr.md.
  • Use the template in references/pr-human-template.md verbatim.
  • Use scripts/build_pr_body.sh to gather environment metadata if available.

Resources

  • references/workflow-commit.md: commit checklist and evidence expectations.
  • references/workflow-pr.md: PR creation/update flow, comment checks, and evidence rules.
  • references/pr-human-template.md: human-written PR structure (must be used as-is).
  • references/commit-format.md: commit message format and examples.
  • scripts/build_pr_body.sh: environment metadata collector for PR prompt history section.