Borrowing it
Nothing to install: this file belongs to suisya-systems/claude-org-ja. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/suisya-systems/claude-org-ja/main/.claude/skills/pr-watch-pane/SKILL.mdgit clone --depth 1 https://github.com/suisya-systems/claude-org-jaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/suisya-systems/claude-org-ja/pr-watch-pane)<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/pr-watch-pane"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/pr-watch-pane/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/suisya-systems/claude-org-ja/pr-watch-pane"><img src="https://agentmods.dev/badge/skills/suisya-systems/claude-org-ja/pr-watch-pane.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 5 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Agent Snooping · line 115 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 531 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Agent Snooping · line 540 Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
- medium Rogue Agent · line 303 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 303 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.13222 |
| Opus 5.5 | $0.00037 | $0.05289 |
| Sonnet 5.5 | $0.00019 | $0.02644 |
| Haiku 4.5 | $0.00009 | $0.01322 |
Grade A, and why
pr-watch-pane scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 523 lines — stays where its author put it; the contents beside it link to each section on GitHub.
pr-watch-pane: CI / マージ監視を専用ペインで回す
tools/pr-watch.sh <PR> --repo <owner/repo> --merge-watch を broker tmux セッション
内の専用ペイン (name="pr-watch-<PR>") で起動する。Bash tool の background 起動は
session 寿命依存で、CI 監視のような長時間 watcher には不適（公式設計の対象外）。broker
ペイン spawn を経由することで sandbox 外・窓口セッション非依存（/clear や窓口の
context リセットと無関係）に監視が継続し、人間が tmux ペインで直接見えるので可視性も高い。
監視結果は二経路で残る:
.state/state.dbevents テーブル …ci_completed/pr_merge_watch_timeoutの canonical event 行（payload 形・CI_COMPLETED/PR_MERGED/PR_MERGE_WATCH_TIMEOUTのメッセージ形は不変）。これが判定の canonical 記録。.state/pr-watch-<PR>.log+ tmux スクロールバッファ … 人間可読の生ログ二段。
peer push は best-effort: 窓口への
CI_COMPLETED/PR_MERGEDpush は欠落しうる （欠落する条件は.claude/skills/pr-watch-pane/references/rationale.md§8）。 待つべき正路は上記 events DB 行と可視ペインであり、push の到達を merge gate の前提にしない。
輸送層（transport）両系: 本文のツール参照は
mcp__org-broker__*（org-broker）で書いてあり、 active transport が既定面ならそのまま従えばよい。輸送層で手順が変わるのは 受信モデル / spawn 儀式 / エラー分岐 の 3 点だけで、opt-in 側の輸送層は削除せず切戻しの安全装置として 常時有効。両系の読み替え規則・契約の批准経緯・broker 固有エラーコードの一覧は.claude/skills/pr-watch-pane/references/transport-duality.mdを参照（上記 3 分岐に入るまで読む必要はない）。
本 skill の spawn 対象は「汎用 CLI ペイン」: 起動するのは
tools/pr-watch.shという shell コマンドであり、Claude セッション（spawn_claude_pane）ではなく 汎用mcp__org-broker__spawn_paneを使う。したがって輸送層の spawn 儀式（broker: folder-trust + channel sidecar の 2 段承認 / renga: dev-channel の 1 段承認）は本 skill では一切発生しない（--mcp-config/--dangerously-load-development-channelsの注入が無く、承認プロンプトが出ない）。attention watcher と同じ CLI ペイン扱いである （.claude/skills/pr-watch-pane/references/transport-duality.md末尾の「attention watcher は ... 2 段承認の対象外」注記と同義）。両系で 切り替わるのは ツール完全修飾名だけ:
- 既定 broker:
mcp__org-broker__spawn_pane（list_panes/set_pane_identity/inspect_pane/close_paneも同様にmcp__org-broker__*）- opt-in renga:
mcp__renga-peers__spawn_pane（同様にmcp__renga-peers__*）以下の手順は
mcp__org-broker__を active transport の完全修飾名に読み替えれば両系で論理同一。 spawn 直後の identity 登録・起動コマンドも両系共通（CLI ペインなので Enter 承認は不要）。
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +32 lines f2fd0e4f0aaf
- 12d ago Changed · -101 lines · -168 tokens per session d7a4df2e8406
- 1mo ago Changed · -31 lines 39bc6907a966
- 2mo ago First seen · 623 lines · 261 tokens per session scan A d986018ddfea
pr-watch-pane is a skill published in the GitHub repository suisya-systems/claude-org-ja (5 stars, last pushed 5d ago), licensed MIT. It adds 93 tokens to every session and 13,222 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
pr-watch
Local PR watcher. Monitors CI status, automatically fixes failing checks by reading failure logs and applying targeted fixes, then optionally merges when all checks pass. Local CLI analog to Claude Code's cloud auto-fix feature.
release-readiness-check
Verify all prerequisites are met before a release by checking PRs, CI/CD status, environment health, and blocking issues across GitHub, ArgoCD, and Jira. Use before cutting a release, deploying to production, or during release planning.
gear
Managing dependencies, CI/CD, advanced GitHub Actions workflows, containers, secrets, and operational config. Use for build, workflow, or environment work.
oma-dev-workflow
Configure development tasks, git hooks, CI/CD, or release automation. Use when creating or fixing a repository development workflow.
ai-driven-code-editor-cli
OpenCode AI - AI-driven code editor/IDE (CLI/TUI version of Cursor/Windsurf). Use when: (1) AI-assisted coding tasks, (2) Code refactoring with AI, (3) GitHub PR review/fixes, (4) Multi-file edits requiring context, (5) Running AI agents on codebases. NOT for: simple one-line ed…
dos-verify-done-claims
Before accepting an agent's 'done / shipped / fixed' claim, verify it against ground truth (git ancestry + the commit's own diff) using the DOS kernel's dos verify and dos commit-audit — never the agent's own narration.