Name: merge-dependency-updates
Rating: 72.8 (1 reviews)
Author: dotnet

merge-dependency-updates

Review and merge open bot PRs: dependency updates from dotnet-maestro, codeflow from dotnet/dotnet, and OneLoc localization PRs. Produces a clickable dashboard with CI status, review state, and suspicious file flags. Use when you want to triage all open bot PRs in one pass.

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Low

Low-risk findings worth noting

Quality

Content

80%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

Highly actionable body with executable GraphQL queries and git commands, sequenced into four clear steps and supported by a troubleshooting table, and concise without concept-fluff. Weaker on workflow_clarity (no explicit verify-checkpoint on the batch merge/bump path) and progressive_disclosure (a monolithic file with no referenced detail materials).

Suggestions

Add an explicit validation checkpoint before merging dependency PRs (e.g., 'Verify CI = SUCCESS and reviewDecision = APPROVED before merging; otherwise hold and report in the dashboard') to satisfy the batch-operation feedback-loop requirement.

Move the large GraphQL query blocks and the dashboard template into a references/ file (e.g. references/graphql-queries.md, references/dashboard-template.md) linked from the body so SKILL.md stays a lean overview.

Add a verify step after the VersionPrefix bump (e.g. grep the updated <VersionPrefix> and confirm it equals X.Y.(Z+1)) before committing and pushing the branch.

Dimension	Reasoning	Score
Conciseness	Lean and free of concept-fluff — uses compact tables and real GraphQL/git snippets with no 'what is a PR' padding; every block (queries, dashboard template) earns its place, matching the 'lean and efficient' anchor rather than the padded level-2.	3 / 3
Actionability	Provides fully executable guidance — complete `gh api graphql` queries, the `updatePullRequestBranch` mutation, exact git checkout/commit/push commands, and concrete search strings — matching the 'copy-paste ready' anchor rather than the pseudocode of level 2.	3 / 3
Workflow Clarity	A clear 4-step sequence with a troubleshooting/error-recovery section exists, but the batch merge and version-bump paths lack an explicit verify-before-merge / verify-after-bump checkpoint, so per the batch-operation feedback-loop rule it is capped at the 'steps present but checkpoints missing' level rather than 3.	2 / 3
Progressive Disclosure	Well-organized into clear sections but the entire skill is a monolithic ~200-line single file with no references/, scripts/, or assets/ bundles, and large query/dashboard blocks that could be split out are inline, matching the 'some structure but content that should be separate is inline' anchor rather than the one-level-deep references of level 3.	2 / 3
	Total	10 / 12 Passed

Description

100%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, third-person description covering three concrete bot-PR categories with a single explicit 'Use when' trigger and a distinctive MSBuild-focused niche. All four dimensions hit the top anchor with no vague fluff or over-claims.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete actions ('Review and merge open bot PRs', categorizes dependency updates / codeflow / OneLoc, 'Produces a clickable dashboard with CI status, review state, and suspicious file flags'), matching the 'lists multiple specific concrete actions' anchor rather than the partial level 2.	3 / 3
Completeness	Explicitly answers what ('Review and merge open bot PRs: dependency updates from dotnet-maestro, codeflow from dotnet/dotnet, and OneLoc localization PRs') and when ('Use when you want to triage all open bot PRs in one pass'), satisfying both halves of the level-3 anchor.	3 / 3
Trigger Term Quality	Includes natural maintainer terms ('open bot PRs', 'dependency updates', 'codeflow', 'OneLoc localization PRs', 'triage all open bot PRs in one pass') with good coverage, beyond the partial keyword set of level 2.	3 / 3
Distinctiveness Conflict Risk	A clear MSBuild-specific niche ('dotnet-maestro', 'codeflow from dotnet/dotnet', 'OneLoc localization') with distinct triggers unlikely to conflict with other skills, matching the level-3 anchor.	3 / 3
	Total	12 / 12 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning

	Total	15 / 16 Passed

Repository: dotnet/msbuild
Path: .github/skills/merge-dependency-updates/SKILL.md
Commit: c88db8e

Reviewed: 5 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.