Arh Pr Workflow
v1.0.0Expert guidance for managing Pull Requests and feature branches using Uber's arh CLI tool. Use when creating features, publishing PRs, managing stacked PRs,...
⭐ 0· 84·0 current·0 all-time
byAjit Singh@ajitsingh25
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description describe using Uber's arh CLI and the SKILL.md contains only arh/git workflows, branch naming, and commit templates for Uber repos. References to Uber-specific repos, commit templates, and GitHub auth are consistent with the claimed purpose.
Instruction Scope
The instructions direct the agent (or user) to run arh and git commands, detect repository type (production vs non-production), and use GitHub auth. These actions are within the skill's purpose but imply the agent will read repository state (git remotes, working tree) and may run destructive commands (arh discard, arh merge, arh tidy). Exercise caution when executing commands that delete branches or close PRs.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing will be downloaded or written to disk by the skill itself.
Credentials
The skill declares no required env vars or credentials, which matches being a usage guide. The docs do reference use of SKIP_COVERAGE/COVERAGE_THRESHOLD, ~/.aliases, /tmp marker files, and an mcp__github__get_me helper for fetching GitHub login — these are contextual and expected for Uber internal workflows but mean the agent/user may need GitHub auth and access to repository files. No unexplained external credentials are requested.
Persistence & Privilege
always:false and no install behavior. The skill does not request persistent presence or modify other skills or system-wide configs (only documents using existing wrappers and hooks).
Assessment
This skill is a documentation-only helper for Uber's arh CLI and appears coherent with that purpose. It does not install anything or ask for unrelated secrets, but it instructs running real git/arh commands (including destructive ones like arh discard and arh merge) and may prompt you to sign into GitHub via arh auth. Before using: (1) confirm you are in the intended repository (production vs personal) to avoid deleting the wrong branches; (2) review any commands that delete remote branches or close PRs; (3) be aware the docs reference internal helpers (mcp__github__get_me, custom hooks, ~/.aliases) that only apply in Uber's environment—if you are not in that environment, ignore or adapt those parts; (4) the skill itself won’t exfiltrate data, but running the described commands will access your git remotes and may require authentication—ensure you trust the environment and agent before allowing autonomous execution.Like a lobster shell, security has layers — review code before you run it.
latestvk97ct4jr3e0qqs411xdwfpzv6x83aqh1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
