Install
$ agentstack add skill-chifunghillmanchan-shipwright-ship-it ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Ship It
Commit, push, create PR, watch CI, auto-fix failures, merge, and return to main.
Workflow
digraph ship {
"Check status" -> "Has changes?";
"Has changes?" -> "Commit + Push" [label="yes"];
"Has changes?" -> "PR exists?" [label="no"];
"Commit + Push" -> "PR exists?";
"PR exists?" -> "Watch CI" [label="yes"];
"PR exists?" -> "Create PR" [label="no"];
"Create PR" -> "Watch CI";
"Watch CI" -> "CI checks visible?" ;
"CI checks visible?" -> "Wait + Retry" [label="no (delay)"];
"Wait + Retry" -> "Watch CI";
"CI checks visible?" -> "CI passed?" [label="yes"];
"CI passed?" -> "Merge + Cleanup" [label="yes"];
"CI passed?" -> "Diagnose + Fix" [label="no"];
"Diagnose + Fix" -> "Commit + Push";
"Merge + Cleanup" -> "Done";
}
Steps
1. Commit & Push
- If working tree has changes: stage, commit with descriptive message, push
- If clean but not pushed: push
- If already pushed: skip to PR
2. Create PR (if none exists)
- Check with
gh pr list --head - If no PR:
gh pr createwith summary of all commits since main - If PR exists: use existing PR number
3. Watch CI (CRITICAL — never skip this)
CI checks may take time to appear after push/PR creation. You MUST confirm checks are visible and passing before merging.
Step 3a: Wait for checks to appear
- Run
gh pr checksto see if checks are listed - If "no checks reported" is returned, CI has not started yet — this does NOT mean "no errors"
- Wait 15-30 seconds and retry:
gh pr checks - Repeat up to 6 times (total ~3 minutes) until checks appear
- If checks never appear after 6 retries, inform the user — do NOT assume it's safe to merge
Step 3b: Watch checks until completion
- Once checks are visible, run
gh pr checks --watchto wait for all checks to finish - Only proceed to merge when ALL checks show as passed
- If
--watchexits with code 0, checks passed - If
--watchexits with non-zero, checks failed — go to step 4
NEVER merge when:
gh pr checksreturns "no checks reported" — checks haven't loaded yet- Any check is still "pending" or "in_progress"
- Any check has failed
4. On CI Failure
- Run
gh pr checksto identify which check failed - Fetch the failed check's logs:
gh run view --log-failed - Diagnose the error (lint, type-check, test failure, build error)
- Fix the issue in code
- Commit the fix, push, and go back to step 3 (watch CI again)
- Repeat until CI passes (max 3 fix attempts, then ask user)
5. On CI Pass — Merge & Cleanup
- Only after ALL checks are confirmed green
- Squash merge:
gh pr merge --squash --delete-branch - If branch protection blocks merge, use
--adminflag - Checkout main:
git checkout main && git pull - Confirm completion
Important
- Always use
--squashmerge to keep main history clean - NEVER merge without confirmed green CI — "no checks" means "not loaded yet", not "no errors"
- Max 3 auto-fix attempts before asking the user for help
- Never force push or use destructive git commands
- Follow the project's existing commit message conventions
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: ChiFungHillmanChan
- Source: ChiFungHillmanChan/shipwright
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.