Agent skill · Audited from source
Create Pr
skill · desplega-ai/agent-swarmMIT licenceAudited 14 Oct 2026 · source 4df377778267
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 4df377778267 and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 5 findings, 0 critical or high. What it does: Create a pull request (GitHub) or merge request (GitLab) from the current branch
Cite
Cite this page
ModelsAtlas. “Create Pr (desplega-ai/agent-swarm)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/desplega-ai/create-pr
4 skills are called “Create Pr”. You are viewing desplega-ai/agent-swarm.
- desplega-ai/agent-swarm★ 882!CAUTION
- n8n-io/n8n★ 208k!CAUTION
- fcakyon/claude-codex-settings★ 1.2k✓SAFE
- ReflexioAI/claude-smart★ 783!CAUTION
Trust audit
Audit 0.4.1 · source read 14 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (5)
MEDIUMInventory / provenanceinv.symlink · .agents/skills/dashboard-ui
.agents/skills/dashboard-ui
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .agents/skills/swarm-local-e2e
.agents/skills/swarm-local-e2e
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .claude/skills/dashboard-ui
.claude/skills/dashboard-ui
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .claude/skills/swarm-local-e2e
.claude/skills/swarm-local-e2e
- Why
- link not followed
- Fix
- —
LOWInventory / provenanceinv.symlink · AGENTS.md
AGENTS.md
- Why
- link not followed
- Fix
- —
Audit 0.4.1 · source sha 4df377778267 · 14 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherdesplega-ai GitHub organizationOwner of the repository this skill is read from
- Source folderdesplega-ai/agent-swarm/plugin/pi-skills/create-prThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict4df377778267A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Create a pull request (GitHub) or merge request (GitLab) from the current branch
--- name: create-pr description: Create a pull request (GitHub) or merge request (GitLab) from the current branch --- # Create Pull Request / Merge Request Create a PR (GitHub) or MR (GitLab) from the current branch with an auto-generated title and description. **Provider detection:** Check the remote URL: - If `github.com` → use `gh` CLI - If `gitlab.com` or `gitlab.` → use `glab` CLI ## Arguments - `base-branch` (optional): Branch to merge into (defaults to `main` or repo default) ## Prerequisites You should be working in a repository cloned to `/workspace/personal/<repo-name>`. ## Workflow 1. **Verify state** — confirm you're in a git repo, not on main/master, and have commits to push. 2. **Run PR checks (MANDATORY)** — Run ALL checks listed in the "PR Checks" section of your Repository Guidelines. Run each command/task sequentially. If ANY check fails, fix the issue and re-run until all pass. If no guidelines are defined, check the project's CLAUDE.md for a pre-PR checklist and run those. Do NOT proceed until all checks pass. 3. **Push the branch** — `git push -u origin HEAD` 4. **Gather context** — review commit messages and changed files since diverging from base. 5. **Generate title and description.** Follow the conventions of the repository you are working in, not a fixed format: - **Title**: Concise summary (conventional commit style if the repo uses it) - **Description**: If the repo has a PR/MR template, use its headings as the structure and fill every section. GitHub looks for `pull_request_template.md` in `.github/`, `docs/`, or the repo root (plus an optional `PULL_REQUEST_TEMPLATE/` directory), and falls back to the org's `.github` repo. GitLab uses `.gitlab/merge_request_templates/`. Also follow any PR rules in the repo's `CLAUDE.md`, `AGENTS.md`, or `CONTRIBUTING.md`. If the repo defines none, include: summary of changes, notable items, testing done, related issues. - **Show the change, do not narrate it.** Aim for about 250 prose words; code blocks, mermaid, tables and `<details>` do not count. No file-by-file changelog: that belongs in your task output. - **Review map**: build it from `git diff --stat <base>...HEAD`. One row per area, biggest risk first, with `(+N/-M)`, a depth (🔍 deep, 👀 skim, ⏭ skip for tests and generated files) and what could break. - **Change outline**: 1 or 2 views of the shape of the change. Pseudocode with `+`/`-` lines for logic, mermaid for flow, a tree with paths on the nodes for structure. - **Swarm provenance** (when you run in the swarm): fill it from your task context. Link the task (`$APP_URL/tasks/<taskId>`) and its tree (`$APP_URL/sessions/<rootTaskId>`), the Slack permalink of the ask if the task came from Slack, any workflow run, and the plan or research as an `agent-fs share-create` link plus its durable `live.agent-fs.dev` path. These auth-gated links go in this section only. - **Media**: images and mp4s as GitHub user attachments (`github-attach` skill), docs as `agent-fs share-create` links. Never a presigned agent-fs URL for docs or videos. 6. **Create the PR/MR** using `gh pr create` or `glab mr create`. `gh pr create --body` does not apply the repo template, so write the filled description to a file and pass it with `--body-file <file>`. 7. **Check CI status** — After creating the PR, wait ~30 seconds, then check CI with `gh pr checks <pr-number>` (GitHub) or `glab mr view --json pipelines` (GitLab). If any check is failing, investigate the failure, fix it, push the fix, and re-check. Repeat until CI is green. 8. **Report** the PR/MR URL and CI status. ## Tips - Link related issues using `Fixes #123` or `Closes #123` in the description - If the repo ships `scripts/check-pr-body.ts`, run it on the body file before creating the PR - Keep PRs focused — one logical change per PR - If the branch has many commits, summarize the overall change rather than listing each commit
Excerpt, first 3,935 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 4df3777
git clone https://github.com/desplega-ai/agent-swarm git -C agent-swarm checkout 4df377778267
The author documents no install command, so this uses the repository directly. Our verdict covers commit 4df377778267 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
4df377778267
Similar skills
All automation skills →desplega-ai/agent-swarm
Close a GitHub or GitLab issue with a summary comment
desplega-ai/agent-swarm
Implement a GitHub issue or GitLab issue and create a PR/MR
desplega-ai/agent-swarm
Investigate and triage a Sentry error issue
desplega-ai/agent-swarm
Respond to a GitHub issue/PR or GitLab issue/MR
desplega-ai/agent-swarm
Review a pull request (GitHub) or merge request (GitLab) and provide detailed feedback
desplega-ai/agent-swarm
Start the Agent Swarm Leader
Questions about Create Pr
What does the Create Pr skill do?
Is Create Pr safe to install?
What can Create Pr access on my machine?
How current is this page?
Sources
- github.com/desplega-ai/agent-swarm/tree/main/plugin/pi-skills/cr — the audited source at commit 4df377778267 and every finding aboveObserved · 14 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Create Pr skill do?
- Is Create Pr safe to install?
- What can Create Pr access on my machine?