Skip to content
Back to skills

Do Merge

ASecurity

Merge a requested pull request after verifying current-head approval, checks, mergeability, and repository gates.

  • 26 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 23, 2026
ai-agents

Security analysis

A100/100

Scanned September 23, 2026

npx -y skills add tomcounsell/ai --skill do-merge --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Do Merge?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Do Merge
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tomcounsell-do-merge-ai/badge)](https://www.skillsdirectory.com/skills/tomcounsell-do-merge-ai)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: do-merge
description: "Merge a requested pull request after verifying current-head approval, checks, mergeability, and repository gates."
---

# Do Merge

Resolve the target repo/PR and existing merge authorization. Read live PR state, head, mergeability, branch-protection status, checks, and review. A closed or already merged PR should be reported accurately, not merged again. Require the repository's actual green checks and current-head approval; an absent review decision is not approval. The gate fails unless `state == "OPEN"`, `mergeable == "MERGEABLE"`, `mergeStateStatus == "CLEAN"` (BLOCKED, BEHIND, DIRTY, and UNSTABLE all fail), and every `statusCheckRollup` entry has `conclusion == "SUCCESS"`; an empty rollup means no required checks and passes only if branch protection does not require them. If `mergeable == "UNKNOWN"`, wait and re-fetch once; if it is still `"UNKNOWN"`, fail the gate rather than treating UNKNOWN as a pass.
In an active Valor lane, read `docs/sdlc/do-merge.md`, use `tools/pr_head_resolver.py` for gating SHA reads, and verify required REVIEW/DOCS state and fresh recorded verdicts. Do not invent an issue or a lane for a foreign PR solely to satisfy tooling; follow the documented external-PR path.
Verify issue disposition and any concrete authorization gate. Once the user has requested merge and checks pass, execute without redundant confirmation. Use the repo's merge method, normally squash here, and bind the merge to the verified head where supported. If the head moves, revalidate rather than force-merging.
Read back merged state and commit. Apply only documented, scoped plan/worktree cleanup; preserve worktrees with uncommitted or foreign work. Clean up temporary authorization artifacts on success or failure and record the real outcome. Deployment is separate unless included in the request.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.