技能 finishing-a-development-branch
📦

finishing-a-development-branch

內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取

安全地完成開發分支

完成一個分支需要測試、合併選擇與清理紀律。此技能會引導代理完成經驗證的 Git 合併、PR、保留或捨棄流程。

支援: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 差

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求
Review the Skillstore skill "finishing-a-development-branch" from https://skillstore.io/skills/codingcossack-finishing-a-development-branch.md and its manifest at https://skillstore.io/api/skills/codingcossack-finishing-a-development-branch/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/codingcossack-finishing-a-development-branch.md 已簽名 manifest GET /api/skills/codingcossack-finishing-a-development-branch/manifest 已簽名 lockfile GET /api/skills/codingcossack-finishing-a-development-branch/lockfile

測試它

正在使用「finishing-a-development-branch」。 分支已完成，我想在本機合併它。

預期結果:

測試通過，基底分支已選定，合併已完成，並已回報功能分支清理結果。

正在使用「finishing-a-development-branch」。 我想為此分支建立 pull request。

預期結果:

此技能檢查了 GitHub CLI 可用性、推送了分支、建立了 pull request，並保留 worktree 供審查。

正在使用「finishing-a-development-branch」。 我可能想捨棄此分支。

預期結果:

此技能列出分支、commits 與 worktree 路徑，然後在刪除任何內容前等待精確輸入確認。

安全審計

高風險
v8 • 2026/7/5 開啟版本化報告

No prompt injection or malicious exfiltration intent was found. Most static findings are Markdown backtick and fenced-code false positives, but the workflow legitimately runs project tests and Git commands, including branch deletion, worktree removal, push, and pull request creation.

1
已掃描檔案
213
分析行數
13
複核項目
0
已忽略的誤報

已確認的安全問題 (3)

高
SKILL.md:126-146SKILL.md:148-160
Destructive Branch and Worktree Cleanup
The discard and cleanup paths can force-delete a branch and remove a worktree. The skill requires typed confirmation for discard, but these operations can permanently remove local work.
The documented commands include git branch -D and git worktree remove. The confirmation guard reduces accidental use but does not remove the destructive impact.
中
SKILL.md:12-19
Repository-Defined Test Commands Execute Local Code
The workflow selects test commands from project files and requires running them before merge or pull request actions. In an untrusted repository, test scripts can execute arbitrary local commands.
The instructions explicitly map project files to test commands and require running tests. This is legitimate for development, but the execution risk is clear in untrusted repositories.
中
SKILL.md:104-116
Workflow Can Publish Branch Content Externally
The pull request path pushes the feature branch to origin and creates a GitHub pull request. This can disclose local code or metadata if the remote or branch contents are not reviewed first.
The command block explicitly includes git push and gh pr create. The behavior is intentional, but it is network publication that needs user awareness.
能力複核項目 (13)

這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。

高
SKILL.md:141-144
Ruby/shell backtick execution
```bash
The discard path runs git branch -D after confirmation. Force-deleting a branch is destructive and can remove local commits if recovery is not available.
高
SKILL.md:152-160
Ruby/shell backtick execution
```bash
The cleanup block removes a Git worktree path after merge or discard choices. Removing a worktree can delete local files, so the operation is destructive even when intended.
高
SKILL.md:152-160
Template literal with command substitution
```bash
This block includes git worktree remove after path discovery. The command substitution is quoted, but the surrounding cleanup action can delete a worktree directory.
中
SKILL.md:13
Ruby/shell backtick execution
- `package.json` → `npm test` or `yarn test`
The skill instructs agents to run npm or yarn test scripts from a repository. Project-defined test scripts can execute arbitrary local code, so this is a real but expected workflow risk.
中
SKILL.md:14
Ruby/shell backtick execution
- `Cargo.toml` → `cargo test`
The skill instructs agents to run cargo test from the checked-out project. This is expected for Rust projects but still executes local project code.
中
SKILL.md:15
Ruby/shell backtick execution
- `pyproject.toml` / `setup.py` → `pytest`
The skill instructs agents to run pytest for Python projects. Test discovery can execute repository code, so the external-command risk is real in untrusted repositories.
中
SKILL.md:16
Ruby/shell backtick execution
- `go.mod` → `go test ./...`
The skill instructs agents to run go test across the module. This is legitimate validation but executes project tests and build steps locally.
中
SKILL.md:17
Ruby/shell backtick execution
- `Makefile` with `test` target → `make test`
The skill instructs agents to run make test when a Makefile exists. Make targets are arbitrary shell recipes, so this is a real execution risk in untrusted repositories.
中
SKILL.md:19
Ruby/shell backtick execution
Run tests. If any fail, report `⊘ BLOCKED:TESTS` with failure count and stop. Do not proceed to Step
This line directs the agent to run the selected test command before continuing. Running repository tests is intended, but it can execute untrusted project code.
中
SKILL.md:60-64
Ruby/shell backtick execution
```bash
The fenced block directs git checkout, git pull, and git merge operations. These commands mutate the local worktree and may contact the configured remote through git pull.
中
SKILL.md:81-87
Ruby/shell backtick execution
```bash
The fenced block reruns tests and deletes the feature branch with git branch -d. The deletion is guarded by a successful merge path, but it still modifies repository state.
中
SKILL.md:104-116
Ruby/shell backtick execution
```bash
The fenced block pushes the feature branch and creates a GitHub pull request. This can publish local code and metadata to the configured remote.
中
SKILL.md:104-116
Template literal with command substitution
```bash
This block includes git push and gh pr create in the pull request path. The here-doc itself is static, but the workflow can publish branch content externally.

風險因素

⚙️ 外部命令 (50)
SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:16 SKILL.md:17 SKILL.md:19 SKILL.md:25-35 SKILL.md:35-37 SKILL.md:37 SKILL.md:39-45 SKILL.md:45-54 SKILL.md:54-60 SKILL.md:60-64 SKILL.md:64-67 SKILL.md:67-77 SKILL.md:77-81 SKILL.md:81-87 SKILL.md:87-89 SKILL.md:89-93 SKILL.md:93-94 SKILL.md:94-100 SKILL.md:100-104 SKILL.md:104-116 SKILL.md:116-118 SKILL.md:118-122 SKILL.md:122-129 SKILL.md:129-136 SKILL.md:136-141 SKILL.md:141-144 SKILL.md:144-146 SKILL.md:146-152 SKILL.md:152-160 SKILL.md:160-179 SKILL.md:179 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-184 SKILL.md:184-189 SKILL.md:189-190 SKILL.md:29 SKILL.md:105 SKILL.md:106 SKILL.md:108-115 SKILL.md:154 SKILL.md:156 SKILL.md:157 SKILL.md:25-35 SKILL.md:104-116 SKILL.md:152-160
🌐 網路存取 (1)
SKILL.md:96
📁 檔案系統存取 (3)
SKILL.md:28 SKILL.md:29 SKILL.md:95
審計單位: codex 檢視審計紀錄 →
分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告
安全評估

複製報告連結

https://skillstore.io/skills/codingcossack-finishing-a-development-branch/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/codingcossack-finishing-a-development-branch/security.svg)](https://skillstore.io/skills/codingcossack-finishing-a-development-branch?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/codingcossack-finishing-a-development-branch?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/codingcossack-finishing-a-development-branch/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/codingcossack-finishing-a-development-branch.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
學術引用 (APA · BibTeX · CFF)

APA 引用

CodingCossack. (2026). finishing-a-development-branch security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/codingcossack-finishing-a-development-branch/audits/8

BibTeX 引用

@techreport{codingcossack-codingcossack-finishing-a-development-branch-2026, author = {CodingCossack}, title = {finishing-a-development-branch security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/codingcossack-finishing-a-development-branch/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "finishing-a-development-branch security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "CodingCossack" date-released: "2026-07-05" url: "https://skillstore.io/skills/codingcossack-finishing-a-development-branch/audits/8" identifiers: - type: other value: "skillstore:codingcossack-finishing-a-development-branch:audit:8" description: "Skillstore immutable audit report identifier"

比較變體

8 個可安裝變體

每位作者的技能都保留為獨立的可安裝項目。推薦變體依 Skillstore 證據排序。

為何此變體排名第一

Skillstore 使用量較高
ZhanlinCui 推薦

zhanlincui-finishing-a-development-branch

Skillstore 評分 78
證據置信度 高
Skillstore 使用量 21
已更新

2026-09-09

sickn33

sickn33-finishing-a-development-branch

Skillstore 評分 78
證據置信度 高
Skillstore 使用量 14
已更新

2026-09-09

Cycleaddict

cycleaddict-finishing-a-development-branch

Skillstore 評分 78
證據置信度 高
Skillstore 使用量 14
已更新

2026-09-09

davila7

davila7-finishing-a-development-branch

Skillstore 評分 78
證據置信度 高
Skillstore 使用量 13
已更新

2026-09-09

Cygnusfear

cygnusfear-finishing-a-development-branch

Skillstore 評分 78
證據置信度 高
Skillstore 使用量 12
已更新

2026-09-09

obra

obra-finishing-a-development-branch

Skillstore 評分 71
證據置信度 高
Skillstore 使用量 15
已更新

2026-09-09

DYAI2025

dyai2025-finishing-a-development-branch

Skillstore 評分 69
證據置信度 高
Skillstore 使用量 13
已更新

2026-09-09

CodingCossack 目前

codingcossack-finishing-a-development-branch

Skillstore 評分 38
證據置信度 中
Skillstore 使用量 13
已更新

2026-09-09

Skillstore 評分

評分依據 證據置信度: 中
55
架構
85
可維護性
87
內容
72
社群
83
規範符合度

你可以打造什麼

完成本機功能分支

執行測試，將完成的分支合併到所選基底分支，並在之後清理該分支。

準備 Pull Request

推送完成的分支，並根據第一個分支 commit 建立 pull request 標題。

收尾 Worktree 任務

在套用一致的 worktree 清理規則時，保留、合併或捨棄分支。

試試這些提示

完成此分支 
使用 finishing-a-development-branch skill 來檢查測試、識別基底分支，並詢問我想要哪種完成流程。
開啟 Pull Request 
使用此技能來驗證測試、選擇基底分支、推送目前分支，並在我確認該選項時建立 pull request。
合併並清理 
使用此技能在測試通過後將目前分支合併到其基底分支，然後在安全時移除分支與 worktree。
捨棄前稽核 
使用此技能在任何捨棄動作之前顯示分支、commits 與 worktree 路徑，然後等待精確確認。

最佳實務

  • 僅在實作完成且本機變更已準備好進行最終處理後執行此技能。
  • 在選擇合併、pull request 或捨棄動作之前，先檢視偵測到的基底分支。
  • 在執行專案定義的測試命令前，請使用可信任的 repository 或 sandbox。

避免

  • 不要使用此技能來繞過失敗的測試或未解決的合併衝突。
  • 除非已檢視 commits 與 worktree 路徑，否則不要捨棄分支。
  • 不要在未檢查目標 remote 與產生的標題前建立 pull requests。

常見問題

此技能會解決合併衝突嗎？
不會。它會在合併衝突時停止，並告知使用者需手動解決。
它可以建立 pull requests 嗎？
可以。當使用者選擇 pull request 流程時，它會使用 GitHub CLI。
它會刪除分支嗎？
會。它可以在成功合併後，或在精確捨棄確認後刪除分支。
它會在審查期間保留 worktrees 嗎？
會。pull request 與保留流程會保持 worktree 完整。
如果測試失敗會發生什麼事？
工作流程會停止，並回報測試受阻狀態。
需要哪些工具？
需要 Git。只有建立 pull request 時才需要 GitHub CLI。

開發者詳細資訊

授權

MIT

Skillstore 修訂

r1

版本提示

作者未聲明版本。

儲存庫

https://github.com/CodingCossack/agent-skills-library/tree/main/skills/finishing-a-development-branch

引用

02f077c174c5335e2f5d02ca15e77b70d9543e58

維護新鮮度

2026/7/23

使用量

5 次下載 · 303 次瀏覽

檔案結構

📄 SKILL.md

CodingCossack 的更多技能

查看全部

相關技能

查看全部