Borrowing it
Nothing to install: this file belongs to sapiom/sapiom-js. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/sapiom/sapiom-js/main/.claude/skills/open-pr/SKILL.mdgit clone --depth 1 https://github.com/sapiom/sapiom-jsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sapiom/sapiom-js/open-pr)<a href="https://agentmods.dev/skills/sapiom/sapiom-js/open-pr"><img src="https://agentmods.dev/badge/skills/sapiom/sapiom-js/open-pr/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sapiom/sapiom-js/open-pr"><img src="https://agentmods.dev/badge/skills/sapiom/sapiom-js/open-pr.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01657 |
| Opus 5.5 | $0.00000 | $0.00663 |
| Sonnet 5.5 | $0.00000 | $0.00331 |
| Haiku 4.5 | $0.00000 | $0.00166 |
Grade A, and why
open-pr scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Opening a pull request that passes the labeler
Every PR to main, including each layer of a native GitHub stack targeting
main, is classified by .github/workflows/pr-labeler.yml running
scripts/pr-label-classifier.mjs against the PR body. A body that doesn't
follow .github/pull_request_template.md gets the contribution: incomplete
label (the workflow logs say which check failed). The classifier re-runs on
edited/synchronize, so the fix is always: repair the body, never close the PR.
Draft first
Every new PR opens as a draft (gh pr create --draft), including each layer of
a native stack — never open one ready-for-review. The labeler still runs on
drafts: its triggers include opened, synchronize, edited,
ready_for_review, and converted_to_draft, so you get the body verdict
without leaving draft. Mark a PR ready (gh pr ready <num>) only when all of
these hold: CI is green, the body passes the local classifier (step 3), a
changeset exists if a published package changed, and the user explicitly asks.
Agents never flip a draft to ready on their own.
The contract (what the classifier actually checks)
Start from .github/pull_request_template.md verbatim and fill it in. The
checker is prefix-matching and structural, so keep the template's own wording:
- All nine
##sections present (heading text must match): Problem and motivation · Summary and scope · Related work · Validation · Tests and documentation (a###under Validation counts) · Compatibility and release impact · Security · AI assistance · Checklist. - Primary change type: all six checkboxes present, exactly one checked
(
[x]). This also drives the type label (Feature →enhancement, …). - Prose sections non-empty after comments are stripped: Problem and motivation, Summary and scope. HTML comments don't count as content.
- Related work: the line after
Related issue or discussion:must be non-empty; a bareN/Ais allowed for a direct PR. - Validation: must contain real commands/results — the untouched
```textblock with only the# command — resultplaceholder counts as empty. - Tests and documentation: non-empty, or
N/Awith a reason. - Compatibility and release impact: both bullets must have a value after
the colon —
- Breaking or externally visible changes: <something>and- Changeset: <Added …>(orN/Awith a reason). A changed published package really does need a.changeset/*.md(see #599's for the format). - Security: both checkboxes present and both checked.
- AI assistance: both checkboxes present, exactly one checked. If "I used AI assistance" is the one, there must be a non-empty description below the checkboxes (tool, what it did, how you verified).
- Checklist: all seven checkboxes present and all checked — check them honestly, which means the repo gates below actually ran.
The flow
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +19 lines 5d54a55e0d07
- 1mo ago Changed · +5 lines 1df1ffb3606d
- 2mo ago First seen · 94 lines · 0 tokens per session scan A a336712f76a5
open-pr is a skill published in the GitHub repository sapiom/sapiom-js (22 stars, last pushed yesterday), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,657 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
open-pr compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| open-prsapiom/sapiom-js | Skill | 22 | yesterday | MIT | A | 0 | Claude Code |
| merge-batchdiegosouzapw/OmniRoute | Skill | 83k | 6d ago | MIT | A | 46 | Claude Code |
| prowler-commitprowler-cloud/prowler | Skill | 15k | yesterday | Apache-2.0 | A | 44 | Claude Code, Codex |
| gh-auth-isolationgithub/gh-aw | Skill | 5.6k | yesterday | MIT | A | 20 | Claude Code, Codex |
| github-skillzeenie-ai/OpenCompany | Skill | 1.1k | yesterday | MIT | A | 51 | Claude Code |
| comet-githubrpamis/comet | Skill | 3.3k | yesterday | MIT | A | 72 | Claude Code, Codex |
| release-helperSahir619/fable-method | Skill | 2.3k | 1mo ago | MIT | A | 43 | Claude Code |