skilld
All skills
simota avatar

/harvest

@51065a1
by shingo imotasimota/agent-skills85 stars
15

Collecting GitHub PR data and generating work reports. Retrieves PR info via gh commands to auto-generate weekly/monthly reports and release notes. Use when work reporting or PR analysis is needed.

Ask your Agent

Use this Skill: https://skilld.dev/gh/simota/agent-skills/harvest

This session only. Nothing lands on disk.

ARCHIVED_2026-08-19.md

≈381 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Harvest Archive Record

  • Archived: 2026-08-19
  • Retention deadline: 2026-11-17
  • Canonical owner: launch
  • Reason: GitHub PR collection, engineering reporting, delivery metrics, and release-note capabilities were consolidated into Launch to reduce local skill count while preserving the operating knowledge.

Migrated Capability Surface

Launch now owns the active recipes and guidance for weekly/monthly/client reports, PR-flow analysis, DORA/SPACE metrics, OKR linkage, retrospectives, changelog writing, effort estimation, caching, error handling, and PDF export. The active report scripts, template, and stylesheet live under launch/scripts/, launch/templates/, and launch/styles/.

This archived directory retains the complete pre-merge Harvest package for reversible recovery through the deadline.

Restore

  1. Move .archive/harvest/ back to harvest/ and remove this archive record.
  2. Revert the Harvest-derived capability, recipe, collaboration, and reference-map additions in launch/SKILL.md.
  3. Remove or relocate the migrated launch/reference/ reporting files and launch/scripts/, launch/templates/, and launch/styles/ assets so the two active skills do not claim the same concern.
  4. Restore external routing, boundaries, profiles, and collaboration references to Harvest where required.
  5. Run frontmatter, reference-link, and repository validation checks before reactivation.

Do not permanently delete this archive before 2026-11-17 without a separate reviewed decision.

Source: SKILL.md on GitHub

Third-party checks

3 warnings5mo5 checks · Risk MEDIUM
  • Gen Agent Trust Hub5mo

    The skill provides comprehensive tools for PR analysis and reporting but contains several helper scripts vulnerable to command injection. Specifically, generate-report.js and html-to-pdf.sh construct shell commands using string concatenation of input arguments (like repository names or file paths) without sanitization, which could allow arbitrary command execution if an attacker influences these parameters through a malicious prompt or repository metadata.

  • Socket5mo

    No alerts

  • Snyk5mo

    Risk: MEDIUM · 1 issue

  • Runlayer6mo

    5/24 files flagged

  • ZeroLeaks5mo

    Score: 93/100 · 2 sections analyzed

Provenance

Signed by skilld at 51065a1. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 days ago.

Activeupdated 2 months ago

README badge

README badge for simota/agent-skills/harvest