← All skills
create-pr
45 / 100 · High risk
Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.
By yonatangross/orchestkit (GitHub) · coding · 301 stars · scanned at commit 0d38e66
Opens a GitHub PR after pre-flight checks (tests, lint, types, security) with a conventional title and summary. Use only when asked for this skill; an everyday gh pr create stays plain tooling.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.
Found in 170 places.
Show 17 more
- plugins/ork/skills/create-pr/SKILL.md, line 114
if claude ultrareview --help >/dev/null 2>&1; then - plugins/ork/skills/create-pr/SKILL.md, line 172
BRANCH=$(git branch --show-current) - plugins/ork/skills/create-pr/SKILL.md, line 195
npm run lint && npm run typecheck && npm test -- --bail - plugins/ork/skills/create-pr/SKILL.md, line 202
BRANCH=$(git branch --show-current) - plugins/ork/skills/create-pr/SKILL.md, line 232
CR_BIN=$(command -v coderabbit || true) # `cr` is also helm chart-releaser: accept it only by --help - plugins/ork/skills/create-pr/SKILL.md, line 251
TYPE="feat" # Determine: feat/fix/refactor/docs/test/chore - plugins/ork/skills/create-pr/SKILL.md, line 303
PR_URL=$(gh pr view --json url -q .url) - plugins/ork/hooks/README.md, line 1466
(count unchanged at 171, 2026-09-22, sc47 F23/F24): `lifecycle/session-cleanup` gains a 14-day age cap on per-session event dirs. `bin/run-hook.mjs` appends one - plugins/ork/hooks/README.md, line 1478
(count unchanged at 172, 2026-09-04, #3917 FH-ready handler policy): no hook changed; a gate did. Claude Code is designing Function Hooks (anthropics/claude-cod - plugins/ork/hooks/README.md, line 1526
(count unchanged at 171, 2026-08-24, second entry): `instructions-loaded/debt-surfacer` became a reader instead of a scanner (#3708, sibling of #3705). It ran ` - plugins/ork/hooks/README.md, line 1556
(count unchanged, 2026-08-10): `posttool/bash/session-heartbeat-publisher` now tracks the persistent Bash shell's cwd, and `pretool/bash/git-validator`'s third - plugins/ork/hooks/README.md, line 1586
(count unchanged, 2026-07-24): pretool/bash network-egress-guard DENY tier is now QUOTE-AWARE (#3122). It scanned `normalizeSingle(raw)`, which strips quote cha - plugins/ork/hooks/bin/stop-uncommitted-check.mjs, line 23
import { execFileSync } from 'node:child_process'; - plugins/ork/hooks/bin/stop-uncommitted-check.mjs, line 83
const raw = execFileSync( - plugins/ork/hooks/dist/lifecycle.mjs, line 14
`)}catch{}}function Q(t,e,n,r){let o=pn(t,e);if(ft(o))try{let s=zr(o,"utf8");if(ut(s)===ut(n))return g(r,`Rules file ${e} unchanged, skipping write`),!1}catch{} - plugins/ork/hooks/dist/lifecycle.mjs, line 22
`)}catch{}Oo(t,e)}}import{existsSync as ip,readFileSync as cp}from"node:fs";function xn(){let t=U();if(!ip(t))return 0;try{let n=JSON.parse(cp(t,"utf-8")).tools - plugins/ork/hooks/dist/lifecycle.mjs, line 31
Run 'npm audit' or 'pip-audit' for full details.`;if(Tn(r,k),e.log("dependency-version-check",m),u>0||p>0)return O(k,t)}else Tn(r,"none"),e.log("dependency-vers
and 150 more places
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this. It runs automatically when the plugin is installed.
Found in 7 places.
Show 4 more
- plugins/ork/settings.json, line 14
"Read(~/.netrc)", - plugins/ork/settings.json, line 15
"Read(~/.npmrc)", - plugins/ork/hooks/README.md, line 1562
(218 -> 219, global 152 -> 153, 2026-08-09): added `pretool/read/credential-read-guard`, the first PreToolUse hook on the Read tool that can deny. `src/settings - plugins/ork/hooks/dist/lifecycle.mjs, line 22
`)}catch{}Oo(t,e)}}import{existsSync as ip,readFileSync as cp}from"node:fs";function xn(){let t=U();if(!ip(t))return 0;try{let n=JSON.parse(cp(t,"utf-8")).tools
Downloads and installs other software
The author does not mention this. It runs automatically when the plugin is installed.
Found in 7 places.
Show 4 more
- plugins/ork/hooks/dist/permission.mjs, line 13
`)}catch{}}function ht(t,e,n,r){let o=dt(t,e);if(b(o))try{let s=$t(o,"utf8");if(j(s)===j(n))return l(r,`Rules file ${e} unchanged, skipping write`),!1}catch{}re - plugins/ork/hooks/dist/pretool.mjs, line 20
${s}`)}function Sr(t){let e=t.replace(/\\\s*[\r\n]+/g," ");if(/\n/.test(e))return!0;let n=Ot(t);if(/(?:&&|\|\||[|;])/.test(n))return!0;let r=_r(yr(t)),o=Xe(br(r - plugins/ork/hooks/dist/pretool.mjs, line 117
`);return e.log(kt,`Consolidated ${n.length} hooks into ${r}t`),x(o,t)}var nd="headless-defer",rd=["Bash(git push --force*)","Bash(git push -f*)","Bash(npm publ - plugins/ork/hooks/dist/setup.mjs, line 22
Run 'npm audit' or 'pip-audit' for full details.`;if(vt(r,S),e.log("dependency-version-check",g),u>0||f>0)return m(S,t)}else vt(r,"none"),e.log("dependency-vers
Changes files outside its own folder
The author does not mention this. It runs automatically when the plugin is installed.
Found in 1 place.
Sends data to these websites: example.com
The author does not mention this. It runs automatically when the plugin is installed.
Found in 22 places.
Show 17 more
- plugins/ork/hooks/bin/telemetry-sync.mjs, line 88
const response = await fetch(url, { - plugins/ork/hooks/dist/lifecycle.mjs, line 21
`))}function So(t,e){if(!t)return!1;let n=le(e);return n?t.toLowerCase()===n.toLowerCase():!1}function Pl(){let t=null,e=process.env.ORK_HQ_TELEMETRY_URL;return - plugins/ork/hooks/dist/lifecycle.mjs, line 22
`)}catch{}Oo(t,e)}}import{existsSync as ip,readFileSync as cp}from"node:fs";function xn(){let t=U();if(!ip(t))return 0;try{let n=JSON.parse(cp(t,"utf-8")).tools - plugins/ork/hooks/dist/lifecycle.mjs, line 62
`,r=Ms();Og(r,n,"utf8").catch(()=>{g(Yn,"Failed to write telemetry event (non-blocking)")})}async function xe(){let t=Ms();try{let e=await Ls(t);if(e.size<=Ag)r - plugins/ork/hooks/dist/posttool.mjs, line 46
`))}function xo(e,t){if(!e)return!1;let n=ot(t);return n?e.toLowerCase()===n.toLowerCase():!1}function Ml(){let e=null,t=process.env.ORK_HQ_TELEMETRY_URL;return - plugins/ork/hooks/dist/posttool.mjs, line 101
`)}catch{}}function ms(e,t){let n=process.env[e];if(!n)return t;let r=parseFloat(n);return!Number.isFinite(r)||r<=0||r>=1?t:r}function Dm(){let e=Bn(),t=process - plugins/ork/hooks/dist/posttool.mjs, line 104
`,r=ws();rh(r,n,"utf8").catch(()=>{S(qn,"Failed to write telemetry event (non-blocking)")})}async function Yn(){let e=ws();try{let t=await Ts(e);if(t.size<=uh)r - plugins/ork/hooks/dist/posttool.mjs, line 112
`);break}return p()}function na(e,t){if(e===void 0||e===""||e==="*")return!0;if(/^[\w|-]+$/.test(e))return e.split("|").includes(t);try{return new RegExp(e).tes - plugins/ork/hooks/dist/pretool.mjs, line 68
`).filter(Boolean),i=Su(),s=Qr(o,e).length;if(e&&s>=i)return`Context7 session limit reached (${i} queries this session). Rely on already-fetched documentation o - plugins/ork/hooks/dist/pretool.mjs, line 70
`,{flag:"a"})}catch{}}var no=200,Xt=1e3,Vt=20,Cu=new Set(["person","project","technology","concept","tool","pattern","decision","preference","workflow","organiz - plugins/ork/hooks/dist/pretool.mjs, line 74
`))}function po(t,e){if(!t)return!1;let n=ne(e);return n?t.toLowerCase()===n.toLowerCase():!1}function ol(){let t=null,e=process.env.ORK_HQ_TELEMETRY_URL;return - plugins/ork/hooks/dist/pretool.mjs, line 145
`,r=ki();pf(r,n,"utf8").catch(()=>{m(In,"Failed to write telemetry event (non-blocking)")})}async function On(){let t=ki();try{let e=await mi(t);if(e.size<=kf)r - plugins/ork/hooks/dist/prompt.mjs, line 62
`;return Hs(t,r,"utf8"),!0}catch{return!1}}var qs="ORK_SESSION_IDENTITY_RATE_MAX",Xs="ORK_SESSION_IDENTITY_RATE_WINDOW_MS",Ys=5,ur=10*6e4;function Zs(){return p - plugins/ork/hooks/dist/prompt.mjs, line 69
`))}function ze(t,e,n){let r=0,o=(s,a,u)=>s.replace(a,()=>(r+=1,u)),i=Ve(typeof t=="string"?t:"");for(let s of bu)i=o(i,s,"[SECRET]");return i=o(i,xu,"[EMAIL]") - plugins/ork/hooks/dist/setup.mjs, line 13
`)}catch{}}function St(t,e,n,r){let o=kt(t,e);if(T(o))try{let i=Gt(o,"utf8");if(F(i)===F(n))return l(r,`Rules file ${e} unchanged, skipping write`),!1}catch{}re - plugins/ork/hooks/dist/skill.mjs, line 55
`)}catch{}return k()}import{existsSync as gs}from"node:fs";function cn(t,n=v){let e=typeof t.tool_input.file_path=="string"?t.tool_input.file_path:"",r=t.tool_i - plugins/ork/hooks/dist/stop.mjs, line 49
`,"utf8"),Wo(n,t),!0}catch{return!1}}function He(t,e,n,r,o=new Date().toISOString()){return{...t??{repo:n,session_id:r,started_at:o,last_heartbeat:o,status:"run
and 2 more places
Other copies in this repository
yonatangross/orchestkit has 1 more folder with a skill named create-pr. This page shows the lowest-scoring copy.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'create-pr' ] || [ -L ~/.agents/skills/'create-pr' ]; then echo 'A skill folder named create-pr already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/yonatangross/orchestkit' "$d" && git -C "$d" checkout --quiet '0d38e66123f2a4a70737bfae758df796070f07df' -- 'plugins/ork/skills/create-pr' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/ork/skills/create-pr' ~/.agents/skills/'create-pr' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'create-pr' ~/.claude/skills/'create-pr' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for yonatangross/orchestkit shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/yonatangross/orchestkit/)
Score history
| Date | Version | Score |
|---|
| 2026-11-10 | 0d38e66 | 45 |
| 2026-11-07 | caa5346 | 90 |