Install
$ agentstack add skill-m2laborg-agent-skills-pr-and-branch-hygiene ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Pull Request and Branch Hygiene
Apply consistently for every change that ships through a PR — Azure DevOps (Azure DevOps), GitHub (personal M2LabOrg/*), or any other host.
1. Branch Naming
- Always start from a fresh
main. Never branch offmaster(it's stale or absent on most of Michel's repos). - Format:
mdsm/ - Tie to a tracked work item when one exists:
mdsm/-is also fine (e.g.mdsm/443029-cross-paragraph-gender).
git checkout main && git pull
git checkout -b mdsm/
2. Commit Discipline
- Atomic commits. One logical change per commit. Easier to revert, easier to review.
- Imperative subject, max ~72 chars:
"Fix gender enforcement for AWS Translate"not"Fixed bug". - Body when non-trivial: explain why, not what. The diff shows what.
- Keep refactors and behavior changes in separate commits. Reviewers can ignore the refactor and focus on the behavior diff.
- Never
--forcepush a branch under review without coordinating. Use--force-with-leaseif you must.
3. Pre-Push Checklist
Run before every git push:
- Lint + format (project-specific; e.g.
python -m manage checks --fixfor ``) - Unit tests for affected area
- For `
: bumpcontainer.toml/layer.toml` version if you touched containers / layers - Eval suite (when a relevant skill applies, e.g.
eval-development) - Verify no secrets, debug prints, or commented-out blocks slipped in:
git diff --staged
4. PR Description Template
Always use this exact structure:
## Summary
## Linked work
- PBI: # (Azure DevOps)
- Issue: # (GitHub)
## Changes
- —
- ...
## Validation
- [ ] Unit tests pass
- [ ] Lint/format clean
- [ ] Local stack run (Docker) — paste eval table or summary
- [ ] DEV deploy verified (if applicable)
## Eval / Results
## Risks / Rollback
## Screenshots / Diagrams
5. PR Mode
- Open as Draft until the eval/validation section is filled and CI is green. Promote to "Ready for review" only when you'd be comfortable merging it yourself.
- Self-review the diff in the PR UI before requesting reviewers — catches roughly half of "obvious" feedback.
- Tag reviewers explicitly. Don't rely on auto-assignment.
6. Targeting & Merging
- Target
main. Nevermaster. - Prefer squash merge unless commits are individually meaningful and well-crafted.
- Delete the branch after merge.
7. Hosts
| Host | Account | URL pattern | |---|---|---| | Azure DevOps (work) | Azure DevOps org / MEPS | https://dev.azure.com/Azure DevOps/_git/ | | GitHub (personal) | M2LabOrg | https://github.com/M2LabOrg/ |
For personal projects under M2LabOrg, mirror the same PR template and discipline. Use GitHub Issues in place of PBIs.
8. Updating an Open PR
- Address each review comment with either a code change or an inline reply explaining why not.
- Push as additional commits during review (don't rebase). Squash at merge time if needed.
- Re-run the eval / validation suite and update the PR description's results section so reviewers don't have to ask.
9. Anti-Patterns to Avoid
- "WIP" commits with broken state pushed to a PR branch under review.
- Mega-PRs (>500 lines diff) for non-mechanical changes — split them.
- PR descriptions that say only "see PBI". Reviewers should not have to context-switch.
- Renaming the branch after the PR exists; create a new branch and a new PR instead.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: M2LabOrg
- Source: M2LabOrg/agent-skills
- License: MIT
- Homepage: https://m2laborg.github.io/agent-skills/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.