·
Last changedVersion:
This version passed the hardening gate. The skill content was retained without changes. Classified findings before hardening: 2. Classified findings closed: 0. Classified findings remaining: 2. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 19.
1
1
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Data exfiltration | Low | Open |
2 findings
Create or update a pull request for the current branch.
Use ../write-pr/SKILL.md as the standards reference for PR titles, descriptions, release notes, API changes, code changes tables, and human-note preservation.
git branch --show-currentgit status --shortgh pr view --json number,title,url 2>/dev/nullgit log main..HEAD --oneline 2>/dev/null || git log -3 --onelinegh pr list --state open --json number,title,url,author,headRefName,updatedAt, and search for related work: gh pr list --search "<keywords>" --state open.gh pr diff <number> --stat) to judge real overlap, not just a shared filename.main, create a new branch with a descriptive name.git diff main...HEAD), each with a focused lens, then fold their findings into concrete fixes:
../write-pr/SKILL.md § The comment sweep. On an update, this catches whatever the branch grew since the PR was opened, which on a long-lived branch is most of it.gh pr create.gh pr view --json title,body,labels,number and inspect the changed-file summary with gh pr diff --stat.gh pr edit if the existing PR does not match the current diff or the write-pr standards.Closes #123 or Relates to #123 where appropriate.Committing automatically runs hooks. Fix formatting, lint, type, or import issues when the fix is mechanical.
If a hook failure requires meaningful product or implementation decisions, stop and ask the user how to proceed.
Never force commit or force push.
../write-pr/SKILL.md for all PR content standards.Get started with chainctlchainctl skill install public/tldraw/pr:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/tldraw/skills/pr:latest
MIT
HARDENING.md
LICENSE
SKILL.md