hoangsonww/pre-pr
.agents/skills/pre-pr/SKILL.md
Run the full WealthWise pre-PR checklist and report a pass/fail for each gate. Triggers when asked to "run pre-PR checks", "check if this is ready to merge", "validate before opening a PR", or "run the full check". Does NOT trigger implicitly.
$ install --global
skillsauthnpx skillsauth add hoangsonww/WealthWise-Finance-Tracker pre-prInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 7:50 PM7.5s2 files scanned
SKILL.md
- name:
- pre-pr
- description:
- >
Run the full pre-PR checklist for WealthWise. Report pass/fail for each gate.
Gates (run in sequence; stop on first failure unless --all is specified)
Gate 1 — Format
npm run format:check
If it fails, run npm run format to fix, then re-check.
Gate 2 — Type checking
npm run lint
Runs tsc --noEmit across all three packages via Turbo. All must pass.
Gate 3 — Tests
npm run test
All 330 tests must pass (138 API + 41 web + 151 shared-types).
Gate 4 — Build
npm run build
Production build must compile without errors. Validates Next.js output and API TypeScript.
Gate 5 — Dependency audit
npm audit --audit-level=high
High or critical vulnerabilities block the PR. Low/moderate are informational.
Gate 6 — Branch safety
git status && git diff --stat HEAD
git branch --show-current
Verify:
- No uncommitted changes to
.envfiles - Current branch is not
mainormaster - No secrets in staged files (scan for:
sk-,ghp_,mongodb+srv://,Bearer)
Final report
Present results as a table:
| Gate | Status | Notes |
|------|--------|-------|
| Format | ✓/✗ | |
| Type check | ✓/✗ | |
| Tests | ✓/✗ | X/330 passed |
| Build | ✓/✗ | |
| Audit | ✓/✗ | |
| Branch | ✓/✗ | Branch: <name> |
If all gates pass: "Ready to open PR." If any gate fails: list exactly what must be fixed before the PR can be opened.
Related Skills
hoangsonww/test-coverage
development
VerifiedTrustedCommunity
Run the WealthWise test suite with coverage reporting and summarize the results. Triggers when asked to "run tests with coverage", "check test coverage", "show coverage report", or "how many tests pass". Can be scoped to api, web, or types.
12SKILL.mdUpdated Apr 16, 2026
hoangsonww/new-page
development
VerifiedTrustedCommunity
Scaffold a complete new Next.js dashboard page for the WealthWise web app. Triggers when asked to "add a page", "create a dashboard screen", "build a UI for <feature>", or scaffold any new frontend feature end-to-end. Does not trigger for API-only or backend tasks.
12SKILL.mdUpdated Apr 16, 2026
hoangsonww/new-model
development
VerifiedTrustedCommunity
Scaffold a new Mongoose model and its CRUD service for the WealthWise API. Triggers when asked to "create a model", "add a Mongoose schema", or add the data layer for a new entity without a full endpoint. Does NOT scaffold routes, controllers, or frontend code. Use $api-endpoint for the full stack.
12SKILL.mdUpdated Apr 16, 2026
hoangsonww/health-check
development
VerifiedTrustedCommunity
Check the health of the running WealthWise API, web app, and MongoDB services. Triggers when asked to "check if the app is running", "verify the API is up", "is the server healthy", or "show service status".
12SKILL.mdUpdated Apr 16, 2026