DaoFlow-dev/validation-gates
.agents/skills/validation-gates/SKILL.md
Use when validating DaoFlow changes before commit or push, including format, tests, lint, typecheck, conditional instruction checks, and CI follow-through.
$ install --global
skillsauthnpx skillsauth add DaoFlow-dev/DaoFlow validation-gatesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 15, 2026, 9:00 PM30.0s2 files scanned
SKILL.md
- name:
- validation-gates
- description:
- Use when validating DaoFlow changes before commit or push, including format, tests, lint, typecheck, conditional instruction checks, and CI follow-through.
Validation Gates
Use this skill before every DaoFlow git commit and git push.
Load First
- Repository root AGENTS.md
- The nearest package-level
AGENTS.mdfor files you will edit - .agents/workflows/pre-commit.md when you need the full recovery flow
Gate Order
Run these checks in order:
bun run formatbun run test:unitbun run lintbun run typecheckbun run contracts:check- If the diff touches
AGENTS.md,.agents/, or.codex/skills/, runbun run skills:check - Run changed-surface checks for the files you touched
- Run acpx-review
Push Follow-Through
- Ensure Git hooks are installed via
bun installorbun run hooks:install. - Use a conventional commit message.
- After push, verify GitHub Actions with
gh run list --limit 2 --json databaseId,status,conclusion,name. - If CI fails, inspect the failing run with
gh run view <RUN_ID> --log-failedand loop back to step 1.
Pass Criteria
- Formatting applied cleanly
bun run test:unitpassesbun run lintreports 0 errorsbun run typecheckpassesbun run contracts:checkpassesbun run skills:checkpasses when instruction files changed- Changed-surface checks pass
- ACPX review has no blocking findings
- Required CI checks are green after push
Related Skills
DaoFlow-dev/daoflow-github-loop
development
VerifiedTrustedCommunity
Use when working DaoFlow GitHub issues end-to-end with Codex; this compatibility entrypoint loads the repo-local GitHub, validation, and review skills.
10SKILL.mdUpdated Apr 15, 2026
DaoFlow-dev/server-schema-change
data-ai
VerifiedTrustedCommunity
Use when changing DaoFlow server schema or persistence flows, including Drizzle schema files, migrations, seed ordering, and database safety rules.
10SKILL.mdUpdated Apr 15, 2026
DaoFlow-dev/github-issue-loop
testing
VerifiedTrustedCommunity
Use when executing DaoFlow GitHub issue or PR work with gh, including issue intake, durable progress comments, status labels, PR updates, and CI follow-through.
10SKILL.mdUpdated Apr 15, 2026
DaoFlow-dev/cli-contract-change
tools
VerifiedTrustedCommunity
Use when changing DaoFlow CLI commands or agent-facing CLI behavior, including contract updates, JSON output, scope enforcement, mutation flags, and authz updates.
10SKILL.mdUpdated Apr 15, 2026