ghe-transition
Transition GitHub Elements Workflow Phases
Teams need consistent handoffs between development, testing, review, and merge phases. This skill validates allowed transitions, delegates thread changes, and updates workflow memory.
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "ghe-transition" from https://skillstore.io/skills/emasoft-ghe-transition.md and its manifest at https://skillstore.io/api/skills/emasoft-ghe-transition/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "ghe-transition". Move a completed DEV item to TEST.
Expected outcome:
Phase gate passed. The DEV thread was closed, the TEST thread was opened, links were established, and memory was updated.
Using "ghe-transition". Move TEST work to REVIEW before tests pass.
Expected outcome:
Transition blocked. The phase gate found missing test completion evidence, so no thread changes were made.
Using "ghe-transition". Demote a failed REVIEW item to DEV.
Expected outcome:
Review demotion completed. The REVIEW thread was closed, a DEV thread was opened, links were recorded, and memory was synced.
Security Audit
High RiskMost external-command findings are false positives caused by markdown inline code, and the system-reconnaissance findings are workflow headings or checklist items. Real concerns remain: the skill permits writes to ~/.claude, contains authority-style prompt-injection language, and requires full report posting without a redaction step.
Confirmed security concerns (2)
Capability review items (2)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Risk Factors
⚙️ External commands (7)
📁 Filesystem access (2)
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/emasoft-ghe-transition/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/emasoft-ghe-transition?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/emasoft-ghe-transition?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/emasoft-ghe-transition/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/emasoft-ghe-transition.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Emasoft. (2026). ghe-transition security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/emasoft-ghe-transition/audits/9BibTeX citation
@techreport{emasoft-emasoft-ghe-transition-2026,
author = {Emasoft},
title = {ghe-transition security audit report (audit version 9)},
institution = {Skillstore},
year = {2026},
number = {9},
url = {https://skillstore.io/skills/emasoft-ghe-transition/audits/9},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ghe-transition security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
- name: "Emasoft"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/emasoft-ghe-transition/audits/9"
identifiers:
- type: other
value: "skillstore:emasoft-ghe-transition:audit:9"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: MediumWhat You Can Build
Promote completed development work
Move a finished DEV thread into TEST after implementation and test preparation are complete.
Send tested work to review
Move a TEST thread into REVIEW only after the phase gate confirms passing tests.
Demote failed review work
Return REVIEW work to DEV when a fail verdict requires structural changes.
Try These Prompts
Move this GitHub Elements item from DEV to TEST. Validate the phase gate first and report any blocker.
Transition the current TEST thread to REVIEW after confirming all tests pass and completion comments exist.
Demote this REVIEW thread to DEV because the review verdict failed. Close the current thread and link the next one.
Transition this REVIEW thread to merge after a PASS verdict. Include phase-gate results, thread changes, links, and memory-sync status.
Best Practices
- Run it only when the current phase is complete.
- Confirm tests or review verdicts before requesting a transition.
- Review phase-gate blockers before retrying a transition.
Avoid
- Using it as a progress checkpoint.
- Skipping failed validation to force a handoff.
- Requesting a direct DEV to REVIEW transition.