ariffazil/FORGE-precommit-review
skills/_retired/ARCHIVE-dupe-2026-07-12/root_.agents_skills/FORGE-precommit-review/SKILL.md
Pre-commit gate for any organ repo. Runs lint, type-check, test, constitutional surface scan, and shows the diff to the user. Use before every git commit in any organ. Delegates F1-surface detection to f1-gate.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace FORGE-precommit-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 17, 2026, 3:32 AM139.6s1 file scanned
SKILL.md
- name:
- FORGE-precommit-review
- description:
- Pre-commit gate for any organ repo. Runs lint, type-check, test, constitutional surface scan, and shows the diff to the user. Use before every git commit in any organ. Delegates F1-surface detection to f1-gate.
- when_to_use:
- Before every git commit in any organ. Also: before opening a PR, after a non-trivial feature lands.
- disable-model-invocation:
- false
- allowed_tools:
- [Bash, Read, Grep]
Precommit Review
The "always run this before commit" ritual. Mirrors the federation's commitment to reversibility and verifiability.
Steps
git -C /root/<organ> diff --stat HEAD— scope the change- Per-organ checks (run in order; first failure aborts):
- Python organs (arifOS, GEOX, WEALTH, WELL):
ruff check,mypy(where configured),pytest -q - Node organs (A-FORGE, AAA, APEX):
npm run lint,npm test,tsc --noEmit(A-FORGE/AAA only)
- Python organs (arifOS, GEOX, WEALTH, WELL):
- F1 surface scan on diff → if hit, defer to
f1-gate(888 HOLD) - Show diff summary + test result to user
- Wait for explicit "commit" or "abort"
Verification loop
- All checks pass + user OK → commit
- Any fail → abort, surface to user with first failing line
- F1 surface hit → 888 HOLD via
f1-gate
Failure modes
- Linter wrong version → use organ's pinned version from its
pyproject.toml/package.json - Test flaky → re-run once; if still flaky, flag and ask user
- Diff too large (>500 lines) → suggest breaking into smaller commits
Reference
- Per-organ commands: each organ's
Makefileorpackage.json scripts - F1 surfaces: see
f1-gateskill
Related Skills
ariffazil/XAUUSD-trading-stack
development
VerifiedTrustedCommunity
Federation-wide gold (XAUUSD) trading capability. Python stack, OANDA broker, backtesting, macro signals, RSI strategy. Every organ has a role.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/wealth-claim-state
development
VerifiedTrustedCommunity
Capital claim state management — tracks claim lifecycle across WEALTH organ.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga-constitutional
development
VerifiedTrustedCommunity
Archived constitutional warga placeholder retained only for audit provenance. Do not use for active work; use the live arifOS governance and constitutional skills instead.
2SKILL.mdUpdated Jul 24, 2026
ariffazil/warga
testing
VerifiedTrustedCommunity
Warga (citizen) agent skills for AAA federation members. See subdirectories for specialized warga skills.
2SKILL.mdUpdated Jul 24, 2026