Borrowing it
Nothing to install: this file belongs to frostney/GocciaScript. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/frostney/GocciaScript/main/.agents/skills/update-pr/SKILL.mdgit clone --depth 1 https://github.com/frostney/GocciaScriptWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/frostney/gocciascript/update-pr)<a href="https://agentmods.dev/skills/frostney/gocciascript/update-pr"><img src="https://agentmods.dev/badge/skills/frostney/gocciascript/update-pr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/frostney/gocciascript/update-pr"><img src="https://agentmods.dev/badge/skills/frostney/gocciascript/update-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00052 | $0.01300 |
| Opus 5.5 | $0.00021 | $0.00520 |
| Sonnet 5.5 | $0.00010 | $0.00260 |
| Haiku 4.5 | $0.00005 | $0.00130 |
Grade A, and why
update-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Update PR
Update the established PR through integration, relevant commits, a normal push
and current metadata. The request includes resolving routine conflicts and
running the declared PR gate; merging belongs to /deliver under the
delivery settings. Reuse the selected target
and prior authorization. Ask only when the intended PR, a
material
conflict-resolution choice or another material choice within this update
remains unclear.
When the current PR belongs to a native GitHub stack, read ../git-workflow/references/github-stacks.md. When PR media no longer shows the current behavior, or the change needs new media, refresh the affected parts using ../create-pr/references/walkthroughs.md; reuse media that still shows the current behavior. Media tooling gaps alone do not block the update.
- Apply
git-workflow. Inspect the current PR and its base branch, the branch, relevant local changes, recent commits and the fetched remote base asgit-workflowdefines it. Resolve a branch that needs the base under step 3 before deciding whether missing CI needs any action. - Stop if on the base branch or no open PR exists; report the required next
workflow. Stop likewise when
git-workflowgives the PR no remote base. - Merge the remote base into an ordinary branch only when
git-workflow's up-to-date rule calls for it. A branch that is behind keeps its head and its checks, including when this update commits new changes. Preserve both sides' required behavior in additive conflicts; regenerate generated files using the project's tool. Continue through validation when the resolution is established. For a verified native stack, capture remote heads and use the guardedgh stack syncor narrower official stack operation; never use raw rebase or force-push commands. - Apply
/code-review fix-alland/test-against-spec fixto the changed behavior, including any baseline integration. Reuse only evidence whose content, command, environment and coverage still match; a baseline merge or edit invalidates the checks it affects. Run missing or invalidated checks. Repair every verified in-scope requirement gap through/implement's development loop, then establish the declared PR gate. A preview needed to test an unpublished fix permits its draft update; resume testing on that exact revision before claiming readiness. - When relevant changes exist, commit them under
git-workflow: stage only those files, use a concise Conventional Commit subject, and never amend or skip hooks. Run the publication guard at each commit, push and PR write. - When the branch has commits its remote lacks, push an ordinary branch normally, setting upstream when needed. Push a verified stack only through the guarded official stack workflow.
- Reconcile the PR title and body with the complete current diff, scope and
linked issues. A push always changes the head, so after a push reconcile
the body again even when the summary still holds. Keep the title a Conventional Commit
subject for the whole change; it becomes the squash-merge commit subject, so
widened scope may also change its type. Follow
../agent-writing/references/pr-descriptions.md,
preserving explicit project-template requirements and replacing obsolete
summaries, intermediate development history and author verification
sections. Keep the
review note
at the end of the body, updated as it describes. Keep every PR template
heading verbatim and in order, and under a heading with nothing to say
write a one-line
Noneor the reason. Runtemplate-checkon the draft with--kind pr --body FILEbefore writing it and on the live body with--pr Nafter, and fix every heading problem it reports. - Report the updated PR, any new commit, metadata changes, what the
publication guard rewrote and observed validation. Include stack position
and rewritten branches when applicable.
Distinguish passed local checks from pending current-head CI. A draft PR
stays draft until
delivery-waitobserves every required check green on the pushed head; only then may it be marked ready for review. Return the exact current head and next transition to the active publication or delivery caller; that caller continues through CI and feedback. Started directly, continue under the delivery settings; withentry-points: deliver, the pushed head goes on to/deliver, which awaits its CI and review and takes the PR to the configured endpoint (ready-to-mergewhen there is noORCHESTRATION.md). Withstop, end with this report. Report missing walkthrough requirements with remedies.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +18 lines 6fcc7382a755
- 11d ago Changed · +4 lines 2c10f7a01936
- 22d ago Changed · +7 lines bffad8febc44
- 26d ago Changed · +6 lines · +7 tokens per session 289cd40b1837
- 29d ago Changed · +19 lines b6698c0f8159
- 1mo ago First seen · 43 lines · 45 tokens per session scan A 744821922f34
update-pr is a skill published in the GitHub repository frostney/GocciaScript (20 stars, last pushed yesterday), licensed MIT. It adds 52 tokens to every session and 1,300 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
git-step-commit
Analyze Git changes, split them into coherent commits, infer message language and format, optionally close supplied GitHub issues, and execute safely. Manage persistent global or repository preferences for review versus direct submission and automatic or specified commit-message language through native Git config.…
publish-npm-packages
Configure, audit, or migrate npm package publishing to current secure practices. Use when Codex needs to publish or prepare an npm package, fill npm Trusted Publisher settings, create a GitHub Actions/GitLab/CircleCI release workflow, adopt OIDC, replace npm tokens, publish organization-scoped public or private…
create-pr
Creates a GitHub PR with a Linear-ticket-prefixed title and a decision-led, narrative description for Prisma 8. Use when the user wants to create a pull request, open a PR, or submit changes for review.
draft-release-notes
Author the committed release-notes file for a Prisma 8 release (stable or 8.0.0-rc.N) by enumerating the merged PRs since the previous release v tag (stable or -rc.N), resolving opaque TML-NNNN: titles via Linear context (never copied verbatim), triaging public-worthiness, and writing categorized notes — breaking…
publish-npm-version
Cuts the next release of Prisma 8: bumps the root package.json version (on the v8 RC line: 8.0.0-rc.N → rc.N+1), propagates it to every workspace package, and opens a PR titled "chore(release): bump to ". When the maintainer merges the PR, the Publish to npm workflow runs automatically and ships the new version to npm…
triage-contributor-pr
Triage open pull requests from external contributors to prisma/orm and produce a per-PR verdict with evidence. Use when a maintainer asks to triage, evaluate, assess, or review the queue of incoming contributor PRs, to decide whether a fork PR is safe to run CI on, to check whether a PR is in scope for its version…