submit-pull-request skillA
submit-pull-request is agent-read markdown (skill) from jxxghp/moviepilot: Use this skill ONLY when the user explicitly asks to create, submit, push, or open a GitHub Pull Request for code changes. It prepares an isolated clone, reuses or creates the authenticated user's Fork, previews the real Git diff, and after exact confirmation commits and pushes the branch before creating the PR. It does not support submitting files from a non-Git directory..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Submit Pull Request（提交 PR） 这个 Skill 只处理明确的“提交 PR / 推送 PR / 创建 Pull Request”请求。普通的 代码分析、修改、测试和 Issue 反馈不会自动进入本流程，也不会因为代码修改完成 就自动推送远端。 PR 内容必须使用简体中文描述；与用户的对话保持用户使用的语言。 ## 核心约束 - 所有待提交代码必须来自本 Skill 先创建的真实 Git clone。不存在本地仓库时， 先执行 clone 步骤；不要从 Agent 运行目录、日志、缓存或显式文件清单上传内容。 - Fork 操作通过 GitHub API 完成：优先复用当前 Token 用户名下、且 parent 正确的 同名 Fork；不存在时才创建 Fork，并等待 GitHub 返回可读仓库。 - 代码修改发生在 clone 返回的 `source_root` 内。原工作区和运行时目录不作为 PR 源目录；测试也尽量在这个 clone 中执行。 - 实际代码发布走本地 Git：`git add` → `git commit` → `git push`。GitHub API 只用于读取用户/仓库/分支、确保 Fork 和创建/复用 PR，不使用 Git Database API 伪造提交。 - 默认创建 Draft PR；只有用户明确要求立即 Ready for review 时才把 `draft` 设为 `false`。不执行合并、关闭 Issue 或强制推送。 - Token 只从 MoviePilot 的 `REPO_GITHUB_TOKEN` / `GITHUB_TOKEN` 配置和运行环境 读取；解析时优先使用目标仓库专属 Token，再使用共享 Token。GitHub Device Flow 和 手动 PAT 都写入同一个服务端 `GITHUB_TOKEN`，因此无需在聊天里再次输入。绝不向用户 索取、回显或写入命令行 Token；Git HTTPS 通过临时 askpass 环境提供认证。 - Device Flow 请求 `read:user`、`repo`、`workflow`：分别用于识别 GitHub 用户、读写 公开或私有仓库，以及推送 GitHub Actions 工作流文件。GitHub 会在授权页面展示这些 权限；旧 Token 若缺少所需范围，应从 MoviePilot 设置页重新授权。手动 PAT 必须有目标 仓库的 Fork、Contents 推送和 Pull requests 写入权限；创建 Issue 时还需 Issues 写入， …
Read the whole file at its exact version.
How to install
mdr add jxxghp/moviepilot/submit-pull-request@v2mdr add jxxghp/moviepilot/submit-pull-request@sha256:d4e473eeb0e08edfPin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_kd4g6dqsy37hsmxm)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v2 latest | 2026-09-23 | 9674310 | 7,788 B | A | view · diff |
| v1 | 2026-09-21 | d96f001 | 7,305 B | A | view · diff |
| v1 | 2026-09-21 | fe7c183 | 7,044 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7788 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
jxxghp/moviepilot · 11,797 stars · license GPL-3.0 · pushed 2026-09-24 · branch v3
API
GET https://markdownregistry.com/api/v1/artifacts/art_kd4g6dqsy37hsmxm GET https://markdownregistry.com/api/v1/resolve?ref=jxxghp/moviepilot/submit-pull-request GET https://markdownregistry.com/api/v1/blob/d4e473eeb0e08edf04bf4febd1b14afcb444a0d4c844a3650c1351eeae34fab5
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.