Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add shirenchuang/agentbro --skill agentbro-pr-mergegit clone --depth 1 https://github.com/shirenchuang/agentbroWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/shirenchuang/agentbro/agentbro-pr-merge)<a href="https://agentmods.dev/skills/shirenchuang/agentbro/agentbro-pr-merge"><img src="https://agentmods.dev/badge/skills/shirenchuang/agentbro/agentbro-pr-merge/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/shirenchuang/agentbro/agentbro-pr-merge"><img src="https://agentmods.dev/badge/skills/shirenchuang/agentbro/agentbro-pr-merge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00038 | $0.00649 |
| Opus 5 | $0.00019 | $0.00324 |
| Sonnet 5 | $0.00008 | $0.00130 |
| Haiku 4.5 | $0.00004 | $0.00065 |
Grade A, and why
agentbro-pr-merge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 72 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AgentBro PR Merge
Use this skill for AgentBro pull request triage and merge work.
Rules
- Start with
git status --short --branch. - PRs should target
devunless the maintainer explicitly says otherwise. - Do not merge while required checks are failing or missing.
- For external contributor PRs, prefer Squash and merge into
devso GitHub can attribute the squash commit to the PR author. - Do not squash
devintomainduring release. Release merges should preserve commits withgit merge --no-ff origin/dev. - If a fork PR has
maintainerCanModify: true, small mechanical fixes may be pushed to the contributor branch. Keep them scoped and explain them.
Standard Flow
- Inspect the PR:
gh pr view <number> --repo shirenchuang/agentbro \
--json number,title,author,baseRefName,headRefName,headRepositoryOwner,maintainerCanModify,isDraft,mergeable,mergeStateStatus,statusCheckRollup,commits,files
- Confirm contribution attribution:
gh pr view <number> --repo shirenchuang/agentbro --json author,commits \
--jq '{author:.author.login, commits:[.commits[] | {oid:.oid[0:7], authors:.authors}]}'
If commit authors do not map to the PR author, squash merge is the safer path.
- If GitHub Actions is
action_required, approve it only after checking that the PR did not modify workflows or sensitive release/signing files:
gh api --method POST repos/shirenchuang/agentbro/actions/runs/<run-id>/approve
- If CI fails, fix only narrow mechanical issues unless the user asks for deeper review. For fork PRs:
gh pr checkout <number> --repo shirenchuang/agentbro
# make the small fix
git push https://github.com/<fork-owner>/agentbro.git HEAD:<head-branch>
- Wait for checks:
gh run watch <run-id> --repo shirenchuang/agentbro --interval 10 --exit-status
gh pr checks <number> --repo shirenchuang/agentbro
- Merge only when clean:
gh pr merge <number> --repo shirenchuang/agentbro --squash
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 72 lines · 38 tokens per session scan A 24e7efd7abfa
agentbro-pr-merge is a skill published in the GitHub repository shirenchuang/agentbro (202 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 38 tokens to every session and 649 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
post-merge-scan
Scan recent merges to main for follow-up cleanup: TODOs, deprecations, broken doc links, stale flags. Use in post-merge cleanup loops.
pull-request-author
Use when the user asks to prepare, update, audit, or submit a pull request. Inspect repository contribution rules, branch state, diff, tests, and the target base first; create a focused reviewable change description and do not commit, push, or open a hosted pull request without explicit authorization.
gh-find-prs
Survey open Codewhale PRs and triage each for mergeability and disposition against the real landing branch.
triage
Gatekeep and review GitHub issues and pull requests for Qwen Code maintainers. Use for GitHub Action issue triage, PR admission checks, product-direction review, KISS-focused PR review, and staged bilingual GitHub comments.
gentle-ai-collab-perfect
Trigger: contributing to Gentleman-Programming/gentle-ai as an external collaborator. Strict issue-first workflow, honest PR bodies, contributor-vs-maintainer scope, chained-PR strategy, verification protocol, docstring coverage. Load whenever the active repo is Gentleman-Programming/gentle-ai and any part of the…
branch-pr
Create Gentle AI pull requests with issue-first checks. Trigger: creating, opening, or preparing PRs for review.