submit-pull-request SKILL.md skillA
submit-pull-request from jxxghp/moviepilot is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add jxxghp/moviepilot/submit-pull-request@v2Pins v2 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- jxxghp/moviepilot
- Path
skills/submit-pull-request/SKILL.md- Versions recorded
- 3
- Latest version
- v2, committed Sep 23, 2026
- First version recorded
- Sep 21, 2026
- Size
- 7,788 bytes
- Repository stars
- 12,038
- License
- GPL-3.0
Use this skill ONLY when the user explicitly asks to create, submit, push, or open a GitHub Pull Request for code changes. It prepares an isolated clone, reuses or creates the authenticated user's Fork, previews the real Git diff, and after exact confirmation commits and pushes the branch before creating the PR. It does not support submitting files from a non-Git directory.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Submit Pull Request（提交 PR） 这个 Skill 只处理明确的“提交 PR / 推送 PR / 创建 Pull Request”请求。普通的 代码分析、修改、测试和 Issue 反馈不会自动进入本流程，也不会因为代码修改完成 就自动推送远端。 PR 内容必须使用简体中文描述；与用户的对话保持用户使用的语言。 ## 核心约束 - 所有待提交代码必须来自本 Skill 先创建的真实 Git clone。不存在本地仓库时， 先执行 clone 步骤；不要从 Agent 运行目录、日志、缓存或显式文件清单上传内容。 - Fork 操作通过 GitHub API 完成：优先复用当前 Token 用户名下、且 parent 正确的 同名 Fork；不存在时才创建 Fork，并等待 GitHub 返回可读仓库。 - 代码修改发生在 clone 返回的 `source_root` 内。原工作区和运行时目录不作为 PR 源目录；测试也尽量在这个 clone 中执行。 - 实际代码发布走本地 Git：`git add` → `git commit` → `git push`。GitHub API 只用于读取用户/仓库/分支、确保 Fork 和创建/复用 PR，不使用 Git Database API 伪造提交。 - 默认创建 Draft PR；只有用户明确要求立即 Ready for review 时才把 `draft` 设为 `false`。不执行合并、关闭 Issue 或强制推送。 - Token 只从 MoviePilot 的 `REPO_GITHUB_TOKEN` / `GITHUB_TOKEN` 配置和运行环境 读取；解析时优先使用目标仓库专属 Token，再使用共享 Token。GitHub Device Flow 和 手动 PAT 都写入同一个服务端 `GITHUB_TOKEN`，因此无需在聊天里再次输入。绝不向用户 索取、回显或写入命令行 Token；Git HTTPS 通过临时 askpass 环境提供认证。 - Device Flow 请求 `read:user`、`repo`、`workflow`：分别用于识别 GitHub 用户、读写 公开或私有仓库，以及推送 GitHub Actions 工作流文件。GitHub 会在授权页面展示这些 权限；旧 Token 若缺少所需范围，应从 MoviePilot 设置页重新授权。手动 PAT 必须有目标 仓库的 Fork、Contents 推送和 Pull requests 写入权限；创建 Issue 时还需 Issues 写入， …
Read the whole file at its exact version.
How to install
mdr add jxxghp/moviepilot/submit-pull-request@sha256:d4e473eeb0e08edfThe line at the top of this page pins the label v2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_kd4g6dqsy37hsmxm)
7 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Sep 21, 2026 and Sep 23, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v2 latest | 2026-09-23 | 9674310 | 7,788 B | A | view · diff |
| v1 | 2026-09-21 | d96f001 | 7,305 B | A | view · diff |
| v1 | 2026-09-21 | fe7c183 | 7,044 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7788 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
jxxghp/moviepilot · 12,038 stars · license GPL-3.0 · pushed 2026-11-06 · branch v3
API
GET https://markdownregistry.com/api/v1/artifacts/art_kd4g6dqsy37hsmxm GET https://markdownregistry.com/api/v1/resolve?ref=jxxghp/moviepilot/submit-pull-request GET https://markdownregistry.com/api/v1/blob/d4e473eeb0e08edf04bf4febd1b14afcb444a0d4c844a3650c1351eeae34fab5
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.