future3ooo/code-change-verification
.codex/skills/code-change-verification/SKILL.md
Mandatory verification checklist for code changes: run the repo's standard format/lint/typecheck/test stack before marking work complete.
$ install --global
skillsauthnpx skillsauth add future3ooo/agentic-cockpit code-change-verificationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 11:36 PM5.7s3 files scanned
SKILL.md
- name:
- code-change-verification
- description:
- Mandatory verification checklist for code changes: run the repo's standard format/lint/typecheck/test stack before marking work complete.
- version:
- 1.0.0
Code Change Verification
Purpose
Do not mark an execution task as complete until the repo’s verification stack has passed.
This skill is intended to reduce regressions by making “run the checks” the default behavior for agents when they change runtime code, tests, build config, or deployment scripts.
When to run
Run the full stack when you touch:
- Runtime code
- Auth/billing flows
- Build/test tooling
- CI scripts, lint config, or typecheck config
You may skip the full stack for:
- Docs-only changes
- Comments-only changes
- Formatting-only changes that do not affect runtime behavior
If unsure, run it.
What to run (policy)
- First, follow any repo-local requirements (e.g.
AGENTS.md, runbooks). - Then run the repo’s standard verification commands (format → lint → typecheck → tests/build).
- If anything fails: fix the issue and re-run the full stack.
Behavioral heuristic changes (required):
- Follow the canonical review-comment doctrine in
AGENTS.md. - If you change parser, selector, routing, or guard logic, verification must include:
- the exact reported failure,
- at least one adjacent valid input,
- at least one adjacent false-positive input.
- Fail verification if the patch only appeases reviewer wording or narrows fixtures/contracts without an intentional documented contract change.
This repository (agentic-cockpit)
Run:
npm test
Optional (if configured in the future):
npm run lint
Helper scripts (recommended)
- macOS/Linux:
bash .codex/skills/code-change-verification/scripts/run.sh - Windows:
powershell -ExecutionPolicy Bypass -File .codex/skills/code-change-verification/scripts/run.ps1
If the script cannot detect a supported toolchain, fall back to the repo’s documented commands and
report what you ran in testsToRun.
Learned heuristics (SkillOps)
<!-- SKILLOPS:LEARNED:BEGIN --> <!-- SKILLOPS:LEARNED:END -->Related Skills
future3ooo/cockpit-skillops
development
VerifiedTrustedCommunity
Run SkillOps (debrief -> distill -> lint) so cockpit skills continuously learn from real task outcomes.
1SKILL.mdUpdated Apr 4, 2026
future3ooo/cockpit-qa
testing
VerifiedTrustedCommunity
QA skill: reproduce issues, write clear steps, and validate fixes (locally or via E2E when available).
1SKILL.mdUpdated Apr 4, 2026
future3ooo/cockpit-pr-review-closure-gate
testing
VerifiedTrustedCommunity
Hard gate for PR feedback loops: fix, ask re-check, then resolve only after verified closure.
1SKILL.mdUpdated Apr 4, 2026
future3ooo/cockpit-planning
tools
VerifiedTrustedCommunity
Planning-only skill: produce a dependency-aware plan and acceptance criteria; do not commit.
1SKILL.mdUpdated Apr 4, 2026