{
  "name": "mergify — 6 skills",
  "slug": "source-skills-de6dc0a69f60135b5589c10b",
  "type": "skills",
  "category": "developer-tools",
  "example": false,
  "evidence_state": "pinned_source_listing",
  "stamp": "Pinned source listing — machine-checked",
  "summary": "Pinned source declarations and file hashes were listed.",
  "outcome": "Listed 6 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.",
  "rule_results": [
    "The retained source tree matches its acquisition manifest.",
    "Declared skill names (listing.json): mergify-ci; mergify-config; mergify-events; mergify-merge-protections; mergify-merge-queue; mergify-stack"
  ],
  "task": "What declarations and files are present in this pinned source?",
  "setup": "Git blob acquisition followed by static source inspection.",
  "limitations": "Scope: acquisition and static inspection. Command results: commands.json.",
  "source_url": "https://github.com/mergifyio/mergify-cli.git",
  "documentation_url": "https://github.com/mergifyio/mergify-cli.git",
  "commit": "6307ed10e8628c6fefe408e398ea48af16c94cfd",
  "tree_sha256": "ec5d5472c1dc5a0a9c1c89f2fdd7c538549f5dc19019f65e8b672d75a2ddd1fc",
  "file_sha256": {
    ".claude-plugin/marketplace.json": "10ae94e7a9916a924d9e4c65e235b53539ed90c159c9ecf206c66eb02a5f823b",
    ".claude-plugin/plugin.json": "5cae76fd39eee81d1e4b744c053ad141ff335e9ade09c2573d6dca90e8969ddd",
    ".codex-plugin/plugin.json": "daaede8bf377730a2eaf71fe9c57f14345134b78cbd5ede8b90510a7b36d8e04",
    ".github/workflows/ci.yaml": "804c2dcd400b8a367a7aa47f9c075e8e5101d464af113307b0537e84f76b6223",
    ".mergify.yml": "aed3f5b546a8bb00b747f16fdecbda12da4ba62ce2cf3e2a3214feb56f7fb571",
    "AGENTS.md": "d1a436d77ee88a44e69ad92de5343fad57d2e9fe21b54041c012841223e754a7",
    "LICENSE": "612368bd5d4c0f2cff3c9cecdf75e8d40bdff90062b3897436b4514996fbdddf",
    "README.md": "2216e4678e8b1d42ca312a872c46e198e6fedb5370eef01465c629e7b30ef10a",
    "assets/mergify-icon-black.png": "1a593ba1b2745af27f443249843d6e8c615f694ae802886f7753639951183e3f",
    "install.sh": "64116685db5493176867abd036580535e7336575ad0665030f0137430eec2080",
    "renovate.json": "ca9be23101e92059ea35f86955ff558e24c11222efc805c80c18e00f35c11f41",
    "skills/mergify-ci/SKILL.md": "bb069da1f8a3b8ccdc6d616e64465682a1b8f599678f11bd05eabbfe8fd50208",
    "skills/mergify-config/SKILL.md": "ce31e22c0e9dae27d5c859d4c71297b1e779becd8ecbcae72f64b07ba18b51f9",
    "skills/mergify-events/SKILL.md": "234b5305b7379f130a7cc84585fce71791f62f68afcb1e4ef48787d2cf824de8",
    "skills/mergify-merge-protections/SKILL.md": "a5b2b57310bfd854bcb0dc11256ac2e8aee5e23f4934d440d0a6b857fb10505c",
    "skills/mergify-merge-queue/SKILL.md": "1249eaa1e7f52843a1b722711c35ab2ac8ad81d5d7a51afd35ba071dc5b35a71",
    "skills/mergify-stack/SKILL.md": "b008860e90076b09c68d3ba1e135c19e393122fe04b0c7b785a27dadbed15818"
  },
  "lockfiles": [
    "LOCK.json"
  ],
  "utc_date": "2026-10-19T06:19:31Z",
  "source_date": "2026-10-16",
  "discovered_date": "2026-10-16",
  "retested_date": "2026-10-19",
  "reviewed_date": "2026-10-19",
  "published_date": "2026-10-19",
  "modified_date": "2026-10-19",
  "reviewer": "machine pipeline",
  "harness_version": "toolwitness harness at commit eac457691419a3214df5483f0485ded68080af00",
  "claude_code_version": "Not applicable: static source inspection (commands.json).",
  "model_id": "Not applicable: static source inspection (commands.json).",
  "scanner_version": "Not applicable: static source inspection.",
  "rulepack_version": "Not applicable: static source inspection.",
  "agents": [],
  "disclaimer": "This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.",
  "commands": [
    "Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."
  ],
  "prompt_list": [
    "Not applicable: static source inspection (commands.json)."
  ],
  "history": [
    "2026-10-19T06:19:31Z: pinned source inspection"
  ],
  "application": {
    "name": "mergify — 6 skills",
    "softwareVersion": "6307ed10e8628c6fefe408e398ea48af16c94cfd",
    "applicationCategory": "DeveloperApplication",
    "operatingSystem": "Not exercised"
  },
  "artifacts": {
    "transcript": "Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.",
    "sinkhole_log": "Not applicable: static source inspection (commands.json).",
    "canary_log": "Not applicable: static source inspection (commands.json).",
    "scanner_output": "Not applicable: static source inspection (commands.json).",
    "normalized_text": "{\n  \"listing\": {\n    \"skills\": [\n      {\n        \"path\": \"skills/mergify-ci/SKILL.md\",\n        \"name\": \"mergify-ci\",\n        \"description\": \"Use Mergify CI commands to upload JUnit test results, detect git references, manage CI scopes, and retrieve merge queue metadata. ALWAYS use this skill when working with CI pipelines, test result uploads, quarantine, scopes detection, or merge queue CI context. Triggers on CI, JUnit, test results, quarantine, scopes, git refs, CI insights.\",\n        \"files\": {\n          \"skills/mergify-ci/SKILL.md\": \"bb069da1f8a3b8ccdc6d616e64465682a1b8f599678f11bd05eabbfe8fd50208\"\n        }\n      },\n      {\n        \"path\": \"skills/mergify-config/SKILL.md\",\n        \"name\": \"mergify-config\",\n        \"description\": \"Use Mergify config commands to validate configuration files, simulate Mergify actions, and write Mergify configuration. ALWAYS use this skill when validating, writing, editing, or simulating Mergify config. Triggers on config validate, config simulate, mergify configuration, mergify.yml, .mergify.yml, merge queue config, workflow rules, conditions.\",\n        \"files\": {\n          \"skills/mergify-config/SKILL.md\": \"ce31e22c0e9dae27d5c859d4c71297b1e779becd8ecbcae72f64b07ba18b51f9\"\n        }\n      },\n      {\n        \"path\": \"skills/mergify-events/SKILL.md\",\n        \"name\": \"mergify-events\",\n        \"description\": \"Use `mergify events` to browse the Mergify activity log — every event Mergify recorded for a repository or one pull request (queue enters/leaves, merges, commands, CI Insights, freezes), as a human timeline or JSON. ALWAYS use this skill when investigating what Mergify did to a PR or repository and when, reconstructing a pull request's merge-queue lifecycle, auditing Mergify actions, or filtering events by type. Triggers on activity log, event log, events, what did Mergify do, queue lifecycle, queue history, event timeline, event_type, action.queue.\",\n        \"files\": {\n          \"skills/mergify-events/SKILL.md\": \"234b5305b7379f130a7cc84585fce71791f62f68afcb1e4ef48787d2cf824de8\"\n        }\n      },\n      {\n        \"path\": \"skills/mergify-merge-protections/SKILL.md\",\n        \"name\": \"mergify-merge-protections\",\n        \"description\": \"Use Mergify merge protections to control when PRs merge — PR dependencies (Depends-On header), delayed merges (Merge-After header), and scheduled freezes (CLI). ALWAYS use this skill when managing merge freezes, deployment windows, temporarily blocking merges, setting up PR dependencies, blocking a PR on another PR, coordinating cross-repo merges, scheduling a merge for a specific time, or adding Depends-On or Merge-After headers to PRs. Triggers on freeze, scheduled freeze, merge freeze, deployment freeze, halt merges, depends on, dependency, block merge, merge after, merge later, schedule merge, delayed merge, cross-repo, merge protection.\",\n        \"files\": {\n          \"skills/mergify-merge-protections/SKILL.md\": \"a5b2b57310bfd854bcb0dc11256ac2e8aee5e23f4934d440d0a6b857fb10505c\"\n        }\n      },\n      {\n        \"path\": \"skills/mergify-merge-queue/SKILL.md\",\n        \"name\": \"mergify-merge-queue\",\n        \"description\": \"Use Mergify merge queue to queue/dequeue PRs, to monitor and inspect the queue, and to diagnose a dequeued PR — whether it is queued, why it was dequeued, where its CI failure is, and what to do next. ALWAYS use this skill when queuing or dequeuing a PR, checking queue status, investigating PR merge state, finding out why a PR left the queue, pausing/unpausing the queue, or debugging merge failures. Triggers on queue a PR, requeue, dequeue, dequeued, why was my PR dequeued, dequeue reason, merge queue, queue status, queue pause, queue show, pause, unpause, frozen, bisecting, batch, CI checks, CHECKS_FAILED, PULL_REQUEST_UPDATED.\",\n        \"files\": {\n          \"skills/mergify-merge-queue/SKILL.md\": \"1249eaa1e7f52843a1b722711c35ab2ac8ad81d5d7a51afd35ba071dc5b35a71\"\n        }\n      },\n      {\n        \"path\": \"skills/mergify-stack/SKILL.md\",\n        \"name\": \"mergify-stack\",\n        \"description\": \"Use Mergify stacks for git push, commit, branch, and PR creation. ALWAYS use this skill when pushing code, creating commits, creating branches, or creating PRs. Triggers on push, commit, branch, PR, pull request, stack, stacked, git, rebase, checkout, reorder, move, sync, amend, note, revision history.\",\n        \"files\": {\n          \"skills/mergify-stack/SKILL.md\": \"b008860e90076b09c68d3ba1e135c19e393122fe04b0c7b785a27dadbed15818\"\n        }\n      }\n    ],\n    \"hooks\": [],\n    \"executions\": []\n  }\n}"
  },
  "review_input": {
    "identity_artifact": "identity.json",
    "evidence_sha256": {
      "LOCK.json": "418f1777eeefce267c3ef613cf818d1a20e3d8bcbae405397f840bdf4ce1e1e0",
      "commands.json": "b9ad10a78fbd6a402273b3f2d39e8aa0e20869a088215921bdf2fd9a35da82ab",
      "complete.json": "91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f",
      "identity.json": "03836a2070a04726eba9240273ecaa690f305b1ad844f7d3db5a01236096d5dc",
      "listing.json": "91e20ae7ac90d6e44abc3b8ecdd1cdec7e8b2386a3d121bf7051438a72d5f182",
      "selection.json": "0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"
    },
    "claims": [
      {
        "id": "acquired",
        "field": "summary",
        "text": "Pinned source declarations and file hashes were listed.",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      },
      {
        "id": "listed",
        "field": "outcome",
        "text": "Listed 6 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      },
      {
        "id": "tree",
        "field": "rule_results.0",
        "text": "The retained source tree matches its acquisition manifest.",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      },
      {
        "id": "declared",
        "field": "rule_results.1",
        "text": "Declared skill names (listing.json): mergify-ci; mergify-config; mergify-events; mergify-merge-protections; mergify-merge-queue; mergify-stack",
        "sources": [
          "LOCK.json",
          "listing.json",
          "commands.json"
        ]
      }
    ]
  },
  "review": {
    "kind": "machine-checked",
    "date": "2026-10-19",
    "reviewed_sha256": "28ec9008ae68cac357232778041c3d7b73d0193a77727b7068f1122c5753479d",
    "gates": "459fdaca2e8a1e763f1706840cdc2a79b26edaa46f21eea48798557066aefd1d",
    "codex": "2f9d5cc8df10e9d446938a476be40d6c4545550e70158516b4652ec49bed772f",
    "grok": "b74d9b7c91342c40ebb3516f7714f2fa44279ea4b37f44f8482f4c481ce2a5f7",
    "summary": "Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."
  }
}