Install
$ agentstack add skill-stefanrows-claude-code-plugins-merge-to-main ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Merge to Main Workflow
A repeatable, safe workflow for landing changes on main. Adapt each step to the project's actual tooling — skip Docker if there's no Dockerfile, use whatever lint/test/build commands the project defines, etc. Detect what applies by reading package.json, pyproject.toml, Makefile, Dockerfile, .github/workflows/, or equivalent before assuming.
Setup
- Git auth: Use GitHub CLI (
gh auth setup-git) when available — avoid manual PAT or SSH configuration.
Workflow
- Start fresh. Pull latest
mainand create a new branch with a conventional prefix (feat/,fix/,docs/,chore/,refactor/,test/). Always create a fresh branch — never reuse an existing one for a new change.
- Update docs. Revise
CLAUDE.md,README.md, and any relevant files underdocs/. Reflect the changes being shipped, remove anything outdated, and consolidate duplicates.
- Verify the build. Run the project's lint, test, and build commands. Detect them from the project files; common examples:
- Node:
npm run lint && npm test && npm run build - Python:
ruff check && pytest && python -m build - Go:
go vet ./... && go test ./... && go build ./... - Rust:
cargo clippy && cargo test && cargo build --release
- Verify container build (if applicable). If the repo has a
Dockerfileordocker-compose.yml, rundocker compose buildordocker build .to catch container-specific issues that local builds miss.
- Always stage docs alongside code. In every commit, include
CLAUDE.md,.claude/, anddocs/if they changed. Rungit diff --name-onlybefore committing to confirm nothing is left out.
- Commit with Conventional Commits. Format:
():— types:feat,fix,docs,chore,refactor,test,perf,build,ci. Keep the subject under 72 chars; put the why in the body when it's not obvious.
- Confirm before merging. Always ask the user for explicit confirmation before merging to
main. Summarize what's being merged so they can sanity-check.
- Merge and clean up. After approval: merge the branch to
main, push, then delete the branch locally and on the remote.
- Monitor the deploy (if applicable). If
mainauto-deploys (GitHub Actions, Vercel, Fly, etc.), watch the run and confirm health checks pass. Inspect.github/workflows/to find the relevant workflow.
- Fix forward immediately. If runtime errors appear post-deploy, create a
fix/branch and ship a correction right away — never leavemainbroken.
Notes
- If the project defines its own merge workflow in
CLAUDE.mdordocs/, that takes precedence over this generic flow. - For protected branches or trunk-based workflows that require PRs, replace step 8 with: open a PR via
gh pr create, wait for CI + review, then merge viagh pr merge.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: stefanrows
- Source: stefanrows/claude-code-plugins
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.