future3ooo/cockpit-pr-review-closure-gate
.codex/skills/cockpit-pr-review-closure-gate/SKILL.md
Hard gate for PR feedback loops: fix, ask re-check, then resolve only after verified closure.
$ install --global
skillsauthnpx skillsauth add future3ooo/agentic-cockpit cockpit-pr-review-closure-gateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 11:36 PM4.8s1 file scanned
SKILL.md
- name:
- cockpit-pr-review-closure-gate
- description:
- Hard gate for PR feedback loops: fix, ask re-check, then resolve only after verified closure.
- version:
- 1.0.0
Cockpit PR Review Closure Gate
Use this skill when processing review feedback from bots or humans.
Gate
- Do not claim done while actionable PR feedback remains open.
- Do not resolve review threads immediately after pushing a fix.
- Do not appease reviewers with thread-by-thread wording hacks, curve-fit patches, or fake-green fixture rewrites.
Before fixing a review comment
- Apply the canonical review-comment doctrine in
AGENTS.mdon currentHEAD. - Classify the comment:
- real bug
- hardening concern
- nit/doc-only
- stale/wrong
- Check whether the proposed fix would break valid operator/task phrasing or packet shapes nearby.
- Only then patch and reply.
Required sequence
- Push fix commit.
- Reply with commit SHA and precise change summary.
- Ask reviewer/bot to re-check.
- Keep thread open while verification is pending.
- Resolve only after acknowledgement or clean rerun with no equivalent unresolved finding.
Verification checklist
- Unresolved review threads count is zero.
- PR checks are green.
- No actionable PR conversation comments remain.
Merge completion note contract
- When you actually merge a PR, the task completion
notemust include a canonical merge line:Merged PR<NUMBER> (<PR_URL>) on <ISO_TIMESTAMP> via merge commit <COMMIT_SHA>.
- If merge was requested but not performed, state it explicitly in
note(for example:PR<NUMBER> not merged).
Learned heuristics (SkillOps)
<!-- SKILLOPS:LEARNED:BEGIN --> <!-- SKILLOPS:LEARNED:END -->Related Skills
future3ooo/code-change-verification
development
VerifiedTrustedCommunity
Mandatory verification checklist for code changes: run the repo's standard format/lint/typecheck/test stack before marking work complete.
1SKILL.mdUpdated Apr 4, 2026
future3ooo/cockpit-skillops
development
VerifiedTrustedCommunity
Run SkillOps (debrief -> distill -> lint) so cockpit skills continuously learn from real task outcomes.
1SKILL.mdUpdated Apr 4, 2026
future3ooo/cockpit-qa
testing
VerifiedTrustedCommunity
QA skill: reproduce issues, write clear steps, and validate fixes (locally or via E2E when available).
1SKILL.mdUpdated Apr 4, 2026
future3ooo/cockpit-planning
tools
VerifiedTrustedCommunity
Planning-only skill: produce a dependency-aware plan and acceptance criteria; do not commit.
1SKILL.mdUpdated Apr 4, 2026