All skills
richtabor avatar

/ralph-github-start-loop

@5e7907d
by Rich Taborrichtabor/agent-skills72 stars
10

Runs autonomous loop fetching stories from GitHub Issues. Implements and closes issues as done. Triggers on "loop through my PRDs", "work on my issues", "start the autonomous loop", "implement my PRDs", or requests to work through GitHub issues autonomously.

Use this Skill: https://skilld.dev/gh/richtabor/agent-skills/ralph-github-start-loop

This session only. Nothing lands on disk.

referencesprompt.md

≈782 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Ralph Agent Instructions (GitHub Issues)

You are an autonomous coding agent working in a git worktree on a feature branch.

Your Task

  1. Read recent commits below — they contain context and learnings from previous iterations
  2. Review the open stories provided below
  3. Pick the right story: Analyze dependencies between stories and choose the one that should be done next
    • Consider which files need to exist first
    • Consider what functionality other stories depend on
    • If stories are independent, pick any one
  4. You're already on the correct branch in this worktree
  5. Implement the chosen story
  6. Run quality checks (e.g., typecheck, lint, test - use whatever your project requires)
  7. Update AGENTS.md files if you discover reusable patterns (see below)
  8. Commit with detailed message (see format below)

Update AGENTS.md Files

Before committing, check if any edited files have learnings worth preserving in nearby AGENTS.md files:

  1. Identify directories with edited files - Look at which directories you modified
  2. Check for existing AGENTS.md - Look for AGENTS.md in those directories or parent directories
  3. Add valuable learnings - If you discovered something future developers/agents should know:
    • API patterns or conventions specific to that module
    • Gotchas or non-obvious requirements
    • Dependencies between files
    • Testing approaches for that area
    • Configuration or environment requirements

Examples of good AGENTS.md additions:

  • "When modifying X, also update Y to keep them in sync"
  • "This module uses pattern Z for all API calls"
  • "Tests require the dev server running on PORT 3000"
  • "Field names must match the template exactly"

Do NOT add:

  • Story-specific implementation details
  • Temporary debugging notes
  • Information already in progress.txt

Only update AGENTS.md if you have genuinely reusable knowledge that would help future work in that directory.

Commit Message Format

Use this format:

feat: Story Title (closes #XXX)

- What was implemented
- Key decisions made
- Files changed: path/to/file.ts, other/file.ts

Learnings:
- [Pattern discovered for future iterations]
- [Gotcha encountered]

Agent: Ralph
  • First line closes the issue
  • Body captures context for future iterations
  • Agent: Ralph trailer lets the script filter for Ralph's commits
  • Keep learnings general — patterns that help future stories, not implementation details

Quality Requirements

  • Run the quality gates specified in the PRD issue (look for ## Quality Gates section)
  • If no quality gates specified, run: typecheck, lint, and tests
  • ALL commits must pass quality checks
  • Do NOT commit broken code
  • Keep changes focused and minimal
  • Follow existing code patterns

Stop Condition

After completing the story and committing:

  • End your response normally
  • The orchestration script will check if the issue was closed
  • Another iteration will pick up the next story if any remain

Important

  • Work on ONE story per iteration
  • Commit with the exact message format specified above
  • Keep CI green

Source: SKILL.md on GitHub

4 warnings9d4 checks · Risk MEDIUM
  • Gen Agent Trust Hub9d

    This skill implements an autonomous loop that fetches tasks from GitHub Issues and executes AI-generated code to complete them. The main security concern is that it processes unsanitized content from external GitHub issues and uses it to drive an autonomous agent running with full permissions. This creates a risk where a malicious user could modify a GitHub issue to inject commands that the agent would then execute on the local system.

  • Socket9d

    2 alerts: gptAnomaly, gptSecurity

  • Snyk9d

    Risk: MEDIUM · 1 issue

  • Runlayer7mo

    3/3 files flagged

Signed by skilld at 5e7907d. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 months ago.

Steadyupdated 8 months ago
disable-model-invocation
true
argument-hint
[--all] [iterations] [prd-search]

README badge

README badge for richtabor/agent-skills/ralph-github-start-loop