mergify — 6 skills

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked · 2026-10-19

Run UTC: 2026-10-19T06:19:31Z
Reviewed: 2026-10-19
Published: 2026-10-19
Updated: 2026-10-19

Observations · Limitations · Evidence

Works with:

Works with Claude Code

Works with Codex

Works with Gemini CLI

Works with Grok Build

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 6 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · skills · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-19T06:19:31Z, tree ec5d5472c1dc5a0a9c1c89f2fdd7c538549f5dc19019f65e8b672d75a2ddd1fc.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record

name: mergify — 6 skills
slug: source-skills-de6dc0a69f60135b5589c10b
type: skills
category: developer-tools
example: false
evidence state: pinned_source_listing
stamp: Pinned source listing — machine-checked
summary: Pinned source declarations and file hashes were listed.
outcome: Listed 6 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results: ["The retained source tree matches its acquisition manifest.","Declared skill names (listing.json): mergify-ci; mergify-config; mergify-events; mergify-merge-protections; mergify-merge-queue; mergify-stack"]
task: What declarations and files are present in this pinned source?
setup: Git blob acquisition followed by static source inspection.
limitations: Scope: acquisition and static inspection. Command results: commands.json.
source url: https://github.com/mergifyio/mergify-cli.git
documentation url: https://github.com/mergifyio/mergify-cli.git
commit: 6307ed10e8628c6fefe408e398ea48af16c94cfd
tree sha256: ec5d5472c1dc5a0a9c1c89f2fdd7c538549f5dc19019f65e8b672d75a2ddd1fc
file sha256: {".claude-plugin/marketplace.json":"10ae94e7a9916a924d9e4c65e235b53539ed90c159c9ecf206c66eb02a5f823b",".claude-plugin/plugin.json":"5cae76fd39eee81d1e4b744c053ad141ff335e9ade09c2573d6dca90e8969ddd",".codex-plugin/plugin.json":"daaede8bf377730a2eaf71fe9c57f14345134b78cbd5ede8b90510a7b36d8e04",".github/workflows/ci.yaml":"804c2dcd400b8a367a7aa47f9c075e8e5101d464af113307b0537e84f76b6223",".mergify.yml":"aed3f5b546a8bb00b747f16fdecbda12da4ba62ce2cf3e2a3214feb56f7fb571","AGENTS.md":"d1a436d77ee88a44e69ad92de5343fad57d2e9fe21b54041c012841223e754a7","LICENSE":"612368bd5d4c0f2cff3c9cecdf75e8d40bdff90062b3897436b4514996fbdddf","README.md":"2216e4678e8b1d42ca312a872c46e198e6fedb5370eef01465c629e7b30ef10a","assets/mergify-icon-black.png":"1a593ba1b2745af27f443249843d6e8c615f694ae802886f7753639951183e3f","install.sh":"64116685db5493176867abd036580535e7336575ad0665030f0137430eec2080","renovate.json":"ca9be23101e92059ea35f86955ff558e24c11222efc805c80c18e00f35c11f41","skills/mergify-ci/SKILL.md":"bb069da1f8a3b8ccdc6d616e64465682a1b8f599678f11bd05eabbfe8fd50208","skills/mergify-config/SKILL.md":"ce31e22c0e9dae27d5c859d4c71297b1e779becd8ecbcae72f64b07ba18b51f9","skills/mergify-events/SKILL.md":"234b5305b7379f130a7cc84585fce71791f62f68afcb1e4ef48787d2cf824de8","skills/mergify-merge-protections/SKILL.md":"a5b2b57310bfd854bcb0dc11256ac2e8aee5e23f4934d440d0a6b857fb10505c","skills/mergify-merge-queue/SKILL.md":"1249eaa1e7f52843a1b722711c35ab2ac8ad81d5d7a51afd35ba071dc5b35a71","skills/mergify-stack/SKILL.md":"b008860e90076b09c68d3ba1e135c19e393122fe04b0c7b785a27dadbed15818"}
lockfiles: ["LOCK.json"]
utc date: 2026-10-19T06:19:31Z
source date: 2026-10-16
discovered date: 2026-10-16
retested date: 2026-10-19
reviewed date: 2026-10-19
published date: 2026-10-19
modified date: 2026-10-19
reviewer: Machine-checked
harness version: toolwitness harness at commit eac457691419a3214df5483f0485ded68080af00
claude code version: Not applicable: static source inspection (commands.json).
model id: Not applicable: static source inspection (commands.json).
scanner version: Not applicable: static source inspection.
rulepack version: Not applicable: static source inspection.
agents: []
commands: ["Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list: ["Not applicable: static source inspection (commands.json)."]
history: ["2026-10-19T06:19:31Z: pinned source inspection"]
application: {"applicationCategory":"DeveloperApplication","name":"mergify — 6 skills","operatingSystem":"Not exercised","softwareVersion":"6307ed10e8628c6fefe408e398ea48af16c94cfd"}
review input: {"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 6 skill declarations. Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared skill names (listing.json): mergify-ci; mergify-config; mergify-events; mergify-merge-protections; mergify-merge-queue; mergify-stack"}],"evidence_sha256":{"LOCK.json":"418f1777eeefce267c3ef613cf818d1a20e3d8bcbae405397f840bdf4ce1e1e0","commands.json":"b9ad10a78fbd6a402273b3f2d39e8aa0e20869a088215921bdf2fd9a35da82ab","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"03836a2070a04726eba9240273ecaa690f305b1ad844f7d3db5a01236096d5dc","listing.json":"91e20ae7ac90d6e44abc3b8ecdd1cdec7e8b2386a3d121bf7051438a72d5f182","selection.json":"0ee6cf5e2f4ac80ffc4bfc9e72e290a9fb8ed9071f6f87aa9ccbfb1f0280b786"},"identity_artifact":"identity.json"}
review: {"codex":"2f9d5cc8df10e9d446938a476be40d6c4545550e70158516b4652ec49bed772f","date":"2026-10-19","gates":"459fdaca2e8a1e763f1706840cdc2a79b26edaa46f21eea48798557066aefd1d","grok":"b74d9b7c91342c40ebb3516f7714f2fa44279ea4b37f44f8482f4c481ce2a5f7","kind":"machine-checked","reviewed_sha256":"28ec9008ae68cac357232778041c3d7b73d0193a77727b7068f1122c5753479d","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 22 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "skills/mergify-ci/SKILL.md",
        "name": "mergify-ci",
        "description": "Use Mergify CI commands to upload JUnit test results, detect git references, manage CI scopes, and retrieve merge queue metadata. ALWAYS use this skill when working with CI pipelines, test result uploads, quarantine, scopes detection, or merge queue CI context. Triggers on CI, JUnit, test results, quarantine, scopes, git refs, CI insights.",
        "files": {
          "skills/mergify-ci/SKILL.md": "bb069da1f8a3b8ccdc6d616e64465682a1b8f599678f11bd05eabbfe8fd50208"
        }
      },
      {
        "path": "skills/mergify-config/SKILL.md",
        "name": "mergify-config",
        "description": "Use Mergify config commands to validate configuration files, simulate Mergify actions, and write Mergify configuration. ALWAYS use this skill when validating, writing, editing, or simulating Mergify config. Triggers on config validate, config simulate, mergify configuration, mergify.yml, .mergify.yml, merge queue config, workflow rules, conditions.",
        "files": {
          "skills/mergify-config/SKILL.md": "ce31e22c0e9dae27d5c859d4c71297b1e779becd8ecbcae72f64b07ba18b51f9"
        }
      },
      {
        "path": "skills/mergify-events/SKILL.md",
        "name": "mergify-events",
        "description": "Use `mergify events` to browse the Mergify activity log — every event Mergify recorded for a repository or one pull request (queue enters/leaves, merges, commands, CI Insights, freezes), as a human timeline or JSON. ALWAYS use this skill when investigating what Mergify did to a PR or repository and when, reconstructing a pull request's merge-queue lifecycle, auditing Mergify actions, or filtering events by type. Triggers on activity log, event log, events, what did Mergify do, queue lifecycle, queue history, event timeline, event_type, action.queue.",
        "files": {
          "skills/mergify-events/SKILL.md": "234b5305b7379f

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated 2026-10-19