ariffazil/precommit-review
skills/precommit-review/SKILL.md
Pre-commit gate for any organ repo. Runs lint, type-check, test, constitutional surface scan, and shows the diff to the user. Use before every git commit in any organ. Delegates F1-surface detection to f1-gate.
$ install --global
skillsauthnpx skillsauth add ariffazil/openclaw-workspace precommit-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 13, 2026, 4:08 AM222.2s1 file scanned
SKILL.md
- name:
- precommit-review
- description:
- Pre-commit gate for any organ repo. Runs lint, type-check, test, constitutional surface scan, and shows the diff to the user. Use before every git commit in any organ. Delegates F1-surface detection to f1-gate.
- when_to_use:
- Before every git commit in any organ. Also: before opening a PR, after a non-trivial feature lands.
- disable-model-invocation:
- false
- allowed_tools:
- [Bash, Read, Grep]
Precommit Review
The "always run this before commit" ritual. Mirrors the federation's commitment to reversibility and verifiability.
Steps
git -C /root/<organ> diff --stat HEAD— scope the change- Per-organ checks (run in order; first failure aborts):
- Python organs (arifOS, GEOX, WEALTH, WELL):
ruff check,mypy(where configured),pytest -q - Node organs (A-FORGE, AAA, APEX):
npm run lint,npm test,tsc --noEmit(A-FORGE/AAA only)
- Python organs (arifOS, GEOX, WEALTH, WELL):
- F1 surface scan on diff → if hit, defer to
f1-gate(888 HOLD) - Show diff summary + test result to user
- Wait for explicit "commit" or "abort"
Verification loop
- All checks pass + user OK → commit
- Any fail → abort, surface to user with first failing line
- F1 surface hit → 888 HOLD via
f1-gate
Failure modes
- Linter wrong version → use organ's pinned version from its
pyproject.toml/package.json - Test flaky → re-run once; if still flaky, flag and ask user
- Diff too large (>500 lines) → suggest breaking into smaller commits
Reference
- Per-organ commands: each organ's
Makefileorpackage.json scripts - F1 surfaces: see
f1-gateskill
Related Skills
ariffazil/openclaw
testing
VerifiedTrustedCommunity
OpenClaw edge agent bridge — operational triage, doctor, restart, and A2A bridge routing for the federation edge (Telegram surface). USE WHEN: "openclaw unhealthy", "gateway down", "edge bot not responding", "a2a bridge disconnected", "watchdog tripped", "openclaw doctor", "openclaw restart". NOT for token/security audit — use FORGE-telegram-audit.
2SKILL.mdUpdated Aug 8, 2026
ariffazil/MiniMax Image Generation
tools
VerifiedTrustedCommunity
Generate images, videos, TTS, voice clone, and music via MiniMax MCP server. Use when user asks to "draw", "generate image", "create picture", "make a photo", "text to image", "image generation".
2SKILL.mdUpdated Aug 8, 2026
ariffazil/arifos-constitutional-judge
testing
VerifiedTrustedCommunity
Single load-bearing constitutional-judgment skill. Routes all F1–F13, verdict, hold, seal, scope, authority and floor-check calls through the live arif_judge surface. Replaces 7 overlapping predecessors (arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge, arifos-constitutional-judge).
2SKILL.mdUpdated Aug 8, 2026
ariffazil/FORGE-lsp-pre-edit-gate
development
VerifiedTrustedCommunity
MANDATORY LSP grounding gate BEFORE any code mutation on .ts, .py, .js, .tsx, .jsx files. Forces the agent to read real-time compiler diagnostics and structural project context before editing — eliminating blind guesses and anchoring every mutation in F2 (TRUTH). Routes through arifOS kernel (:8088) for centralized gate logic.
2SKILL.mdUpdated Aug 8, 2026