What does the Secure PR skill do?

It automates the process of running local tests, performing security audits, creating GitHub pull requests, and watching CI checks to ensure safe and reliable code merges.

Does this skill require the GitHub CLI?

Yes, this skill utilizes the 'gh' command-line interface to programmatically create pull requests and monitor the status of CI/CD checks.

Can it fix failing CI checks automatically?

The skill monitors checks and reports failures back to the user. Claude can then investigate the logs, suggest fixes, and re-push code until all checks pass.

Why should I use the Secure PR skill over manual PRs?

It enforces a best-practice DevSecOps workflow, ensuring no code is merged without passing security audits and CI tests, which reduces human error and security risks.

How does the security review step work?

It triggers the /security-review slash command within Claude Code to analyze code diffs for hardcoded secrets, injection vulnerabilities, and unsafe data handling before a PR is created.

Secure PR Workflow

Name: Secure PR Workflow
Author: ConnerBabb

byConnerBabb

0•

Security & Testing

Automates the end-to-end process of security auditing, pull request creation, and CI/CD monitoring using Claude Code.

The Secure PR skill streamlines the software development lifecycle by enforcing a rigorous pre-submission workflow. It guides Claude through essential local checks, initiates a comprehensive security audit via the /security-review command, and automates GitHub pull request creation with standardized templates. By monitoring CI/CD status in real-time, it ensures that only high-quality, secure code is merged, significantly reducing the risk of security vulnerabilities and build failures while maintaining a clean audit trail for every change.

Key Features

01Standardized GitHub Pull Request creation with security-focused templates

02Real-time monitoring and reporting of CI/CD pipeline status

03Automated local linting and unit testing pre-flight checks

040 GitHub stars

05Integrated security review for secrets, injections, and dependency issues

06Guided remediation for failed linting, tests, or security findings

Use Cases

01Enforcing consistent code quality and security standards across a development team

02Automating repetitive GitHub CLI commands for PR creation and status watching

03Ensuring all code changes undergo a mandatory security audit before being merged

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add connerbabb/instapermit secure-pr

For use in Claude.ai and ChatGPT

Download Skill