菜单
Audits mac-yolo-safeguards GitHub ship readiness — pushed commits, open/stale PRs, CI workflow conclusions, Dependabot alerts. Use when user asks if everything is merged, CI passed, pushed, or security-clean. Evidence-only; no ship theater.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Drive Igor's already-authenticated Google Chrome via AppleScript for login-walled dashboards (Stripe Payment Links, Apollo web, Play Console, LinkedIn, ASC). NEVER use Playwright MCP as the source of truth for "am I logged in?" — Playwright is a separate browser profile without Chrome cookies. Trigger when: Stripe, payment links, buy.stripe.com, dashboard.stripe.com, "logged into Chrome", login wall, Playwright got login page but user says they're signed in, Apollo web UI, or any task needs the real Chrome session. Slash: /drive-logged-in-chrome. Cross-ref: use-existing-browser-sessions.
When Igor pastes ANY credential (password, API key, token, client secret) in chat, immediately ingest it into macOS Keychain, confirm service+account only, never refuse with "don't send passwords / rotate yourself" homework. Auto-invoke on credential paste. Covers App Store Connect Apple ID, Play, Stripe, fleet ENV keys, EAS tokens.
X/Twitter via xurl CLI: post, search, DM, media, v2 API.
Execute the real cash path for mac-yolo-safeguards / ThumbGate: diagnose funnel, Apollo enrich, Gmail send, live Stripe links from Chrome, pipeline-update, never ship theater. Trigger when: make money, make money today, do everything, cash, revenue, sell, close, outreach, pipeline stuck, $0 revenue, Partner Pilot, diagnostic $499, hardening $1500, or when tempted to build another sales tool instead of sending. Slash: /execute-revenue-cash-path. Do NOT invoke for pure product engineering without a revenue ask.
Use Apollo.io for sales contact discovery and email enrichment on Igor's Mac. CLI: /opt/homebrew/bin/apollo (apollo-io-cli), already authenticated. Trigger when: make money, outreach, prospects, enrich email, find founder email, no public email, pipeline send, Partner Pilot, cold call, leads, Apollo, or when tempted to give up because leads.csv says "no public email." Slash: /apollo-io-sales. NEVER skip Apollo when money depends on a real inbox.
Drive Igor's already-authenticated Google Chrome via AppleScript for login-walled dashboards (Stripe Payment Links, Apollo web, Play Console, LinkedIn, ASC). NEVER use Playwright MCP as the source of truth for "am I logged in?" — Playwright is a separate browser profile without Chrome cookies. Trigger when: Stripe, payment links, buy.stripe.com, dashboard.stripe.com, "logged into Chrome", login wall, Playwright got login page but user says they're signed in, Apollo web UI, or any task needs the real Chrome session. Slash: /drive-logged-in-chrome. Cross-ref: use-existing-browser-sessions.
基于 SOC 职业分类
| name | audit-github-ship-status |
| description | Audits mac-yolo-safeguards GitHub ship readiness — pushed commits, open/stale PRs, CI workflow conclusions, Dependabot alerts. Use when user asks if everything is merged, CI passed, pushed, or security-clean. Evidence-only; no ship theater. |
git fetch origin
git status
git branch -vv
git log origin/main..HEAD --oneline
git log HEAD..origin/main --oneline
gh auth status
gh pr list --state open
gh pr list --state merged --limit 5
gh run list --limit 10
gh run list --branch "$(git branch --show-current)" --workflow CI
gh api repos/IgorGanapolsky/mac-yolo-safeguards/dependabot/alerts --jq '[.[] | select(.state=="open")] | length'
| Question | Green only if |
|---|---|
| Pushed? | HEAD = origin/<branch> and user cares about uncommitted work (git status clean if claiming "all work pushed") |
| Merged to main? | origin/main..HEAD empty or open PR merged |
| CI passed? | Latest relevant gh run success for the branch/workflow in question — check Store Release vs Internal Distribution separately |
| Stale PRs? | gh pr list --state open reviewed for age |
| Security clean? | Open Dependabot count = 0 (or listed with severities) |
agent/gemini/tmobile-antenna-fix often 42+ commits ahead of main with no open PR..thumbgate/, hermes-mobile/, tools/) is normal — count M + ?? lines.main CI can be green while feature branch never ran CI workflow.latest.json## Ship audit — <branch> @ <sha>
| Check | Answer | Evidence |
|-------|--------|----------|
| Branch synced to remote | | git branch -vv |
| Commits ahead of main | | git log origin/main..HEAD --oneline \| wc -l |
| Uncommitted paths | | git status |
| Open PRs | | gh pr list |
| CI (main) | | run URL + conclusion |
| CI (branch) | | run URL or "none" |
| Dependabot open | | count + packages |
**Everything clean?** YES/NO — one-line reason.
main CI is green and work is on a feature branch