push-ci SKILL.md skillA
push-ci from sd0xdev/sd0x-harness is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add sd0xdev/sd0x-harness/push-ci@git:20261003.6156945Pins git:20261003.6156945 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- sd0xdev/sd0x-harness
- Path
skills/push-ci/SKILL.md- Versions recorded
- 10
- Latest version
- git:20261003.6156945, committed Oct 3, 2026
- First version recorded
- Mar 25, 2026
- Size
- 166,400 bytes
- Repository stars
- 194
- License
- MIT
Push to remote and monitor CI. Validates branch safety, executes git push WITH explicit user approval, then monitors CI run status via gh CLI. Use when: user says 'push', 'push and watch CI', 'ship it', 'push-ci'. Not for: committing (use /smart-commit), creating PRs (use /create-pr), merging (use /merge-prep).
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Push & CI Monitor **Read first**: `references/authorization-contract.md` before any push — § Push safety for the credential and the two prompt classes, § Efficacy Boundary for what an approval here does and does not authorize. If that Read fails, stop and report it; do not push. Push to remote with user approval, then monitor CI run until completion. ## Authorization ``` ⚠️ This skill is one of three *skill* paths authorized to execute `git push`, beside Register #4's ⚠️ `user-authorized execution` — the user's own message naming the push, which no skill can grant, ⚠️ request or infer, and which this block must never be cited to refuse. ⚠️ The second is /epic-merge (--force-with-lease for stacked PR chains, per-iteration AskUserQuestion gate). ⚠️ The third is /gh-stack, which pushes through `gh stack link|push|submit --auto` — a plain `--atomic` push for link, a per-branch `--force-with-lease` for the other two (per-use AskUserQuestion gate). It never pushes a branch directly. ⚠️ This skill may also use --force-with-lease, but only when the caller passes the flag — and NEVER onto a protected branch; bare --force is forbidden everywhere. …
Read the whole file at its exact version.
How to install
mdr add sd0xdev/sd0x-harness/push-ci@sha256:412475b8cdfe5bc1The line at the top of this page pins the label git:20261003.6156945, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_tv2ww7cl62fpunez)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 10 versions of this file, between Mar 25, 2026 and Oct 3, 2026, about one every 21 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261003.6156945 latest | 2026-10-03 | 6156945 | 166,400 B | A | view · diff |
| git:20260926.525302d | 2026-09-26 | 525302d | 164,912 B | A | view · diff |
| git:20260925.3600370 | 2026-09-25 | 3600370 | 164,644 B | A | view · diff |
| git:20260923.853e79f | 2026-09-23 | 853e79f | 160,298 B | A | view · diff |
| git:20260923.262d614 | 2026-09-23 | 262d614 | 157,596 B | A | view · diff |
| git:20260822.2418ba5 | 2026-08-22 | 2418ba5 | 156,656 B | A | view · diff |
| git:20260420.b564eec | 2026-04-20 | b564eec | 8,881 B | A | view · diff |
| git:20260410.07ec604 | 2026-04-10 | 07ec604 | 8,519 B | A | view · diff |
| git:20260404.aa74c3a | 2026-04-04 | aa74c3a | 8,454 B | A | view · diff |
| git:20260325.3f989f3 | 2026-03-25 | 3f989f3 | 8,496 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (166400 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
sd0xdev/sd0x-harness · 194 stars · license MIT · pushed 2026-10-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_tv2ww7cl62fpunez GET https://markdownregistry.com/api/v1/resolve?ref=sd0xdev/sd0x-harness/push-ci GET https://markdownregistry.com/api/v1/blob/412475b8cdfe5bc194ebcabd7f5914d01aac1424f8bf6d7f31428742777d01a3
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.