igorganapolsky/thumbgate-doctor
skills/thumbgate-doctor/SKILL.md
Health-check whether ThumbGate is actually wired into this agent — PreToolUse/SessionStart hooks installed, MCP server reachable, lesson store present, statusline, and overall agent-readiness — then report exactly what to fix. Runs the existing `npx thumbgate doctor` audit and the check_operational_integrity MCP tool. Use when the user says "is ThumbGate wired up", "thumbgate doctor", "check my guardrails are installed", "why aren't my gates firing", "is the MCP server connected", or "agent readiness". Do NOT use to view rules (use the thumbgate-rules skill), to view what was blocked (use the thumbgate-blocked skill), or to capture a new rule (use the thumbgate-guard skill) — this skill only diagnoses setup and wiring.
$ install --global
skillsauthnpx skillsauth add igorganapolsky/rlhf-feedback-loop thumbgate-doctorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 12, 2026, 2:41 AM18.8s2 files scanned
SKILL.md
- name:
- thumbgate-doctor
- description:
- Health-check whether ThumbGate is actually wired into this agent — PreToolUse/SessionStart hooks installed, MCP server reachable, lesson store present, statusline, and overall agent-readiness — then report exactly what to fix. Runs the existing `npx thumbgate doctor` audit and the check_operational_integrity MCP tool. Use when the user says "is ThumbGate wired up", "thumbgate doctor", "check my guardrails are installed", "why aren't my gates firing", "is the MCP server connected", or "agent readiness". Do NOT use to view rules (use the thumbgate-rules skill), to view what was blocked (use the thumbgate-blocked skill), or to capture a new rule (use the thumbgate-guard skill) — this skill only diagnoses setup and wiring.
ThumbGate Doctor
Audit whether ThumbGate is actually wired into this agent — PreToolUse / SessionStart hooks installed, MCP server reachable, lesson store present, statusline, overall agent-readiness — then tell the user exactly what to fix.
This skill wraps existing ThumbGate capability and adds no new logic — it runs the existing doctor + integrity checks.
Workflow
- Run the wiring/health audit:
(Addnpx thumbgate doctor--jsonfor a machine-readable report.) It exits non-zero when the project is notready. - Verify the runtime path with the
check_operational_integrityMCP tool — this confirms the server-side enforcement path is live, not just the local config. - Summarize: ✅ what's wired (hooks, MCP, store, statusline) and ❌ what's missing, each with
its exact fix command (usually
npx thumbgate init). - Lead with the fix. If everything is green, say so plainly with the readiness status; if not, lead with the single highest-impact fix.
The full readiness checklist (each check, what a failure means, and its fix) is in references/wiring-checklist.md.
Example
Input: "why aren't my gates firing? is ThumbGate even wired up?"
Action: run npx thumbgate doctor, then check_operational_integrity, then:
❌ PreToolUse hook not installed — run
npx thumbgate init. ✅ MCP server reachable. ✅ Lesson store present. Fix the hook and your promoted rules will start blocking.
Troubleshooting
npx thumbgate doctorexits non-zero: that's the point — read which checks failed and apply the printed fix (usuallynpx thumbgate init).- Doctor green but gates still don't fire: the rule may not be active — check the thumbgate-rules skill — or no gated action has been attempted yet — check the thumbgate-blocked skill.
check_operational_integrityunreachable while doctor is green: local config is fine but the MCP server isn't running — restart it (npx thumbgate serve).
Quality checklist (self-verify before delivering)
- [ ] I ran the real
npx thumbgate doctorand reported its actual readiness status, not a guess. - [ ] I confirmed the runtime path with
check_operational_integrity, not just local config. - [ ] I listed each ❌ with its exact fix command (e.g.
npx thumbgate init). - [ ] If green, I said so with the readiness status; if not, I led with the single highest-impact fix.
- [ ] I added no new logic — only ran the existing doctor + integrity checks.
Related Skills
igorganapolsky/thumbgate-rules
tools
VerifiedTrustedCommunity
List the active ThumbGate prevention rules, reliability rules, and the promoted lessons behind them, so the user can see which guardrails are currently protecting this project and WHY each one exists. Reads the live rule and lesson stores via the prevention_rules, get_reliability_rules, and search_lessons MCP tools (CLI fallback `npx thumbgate rules`). Use when the user says "what is ThumbGate protecting me from", "show my rules", "show my gates", "what has the agent learned", "list active guardrails", or "what's blocked here". Do NOT use to CREATE a new rule (use the thumbgate-guard skill), to see runtime enforcement counts of what actually fired (use the thumbgate-blocked skill), or to diagnose whether ThumbGate is wired up at all (use the thumbgate-doctor skill).
23SKILL.mdUpdated Jun 12, 2026
igorganapolsky/thumbgate-protect
tools
VerifiedTrustedCommunity
Inspect this repo's branch and release governance (protected branches, release rules, protected-file globs) and, only when the user explicitly approves, grant a scoped, time-limited exception so a protected-file edit or publish can proceed under audit. Reads posture via the get_branch_governance MCP tool and records a narrow, expiring approval via the approve_protected_action MCP tool. Use when the user says "is main protected", "show branch governance", "what am I blocked from editing", "approve this protected change", or "let me edit a protected file just this once". Do NOT use to disable protection wholesale, to grant broad or standing exceptions, or to diagnose hook wiring (use the thumbgate-doctor skill) — this skill is for narrow, temporary, audited approvals only.
23SKILL.mdUpdated Jun 12, 2026
igorganapolsky/thumbgate-guard
tools
VerifiedTrustedCommunity
Turn the agent's most recent mistake into an enforced ThumbGate prevention rule (a PreToolUse block gate) so the same bad tool call is intercepted before it runs again, in this and every future session across Claude Code, Cursor, Codex, Gemini, Amp, and Cline. Captures the failure with the capture_feedback MCP tool, then force-promotes it via `npx thumbgate force-gate` so it is enforced, not just logged. Use when the user says "guard against this", "block this from happening again", "never do that again", "make that a rule", "stop the agent from repeating that", or right after a bad action or thumbs-down that should become a hard rule. Do NOT use to merely log a thumbs-up/down without enforcement (use the thumbgate-feedback skill), to recall prior context before starting work (use the Agent Memory skill), or to list rules that already exist (use the thumbgate-rules skill).
23SKILL.mdUpdated Jun 12, 2026
igorganapolsky/thumbgate-blocked
tools
VerifiedTrustedCommunity
Show ThumbGate's enforcement record — how many risky actions were actually blocked versus warned, which gates fire most, the tokens/damage saved, and the full feedback to check to rejection pipeline. Reads live enforcement counters via the gate_stats and enforcement_matrix MCP tools (CLI fallback `npx thumbgate gate-stats`). Use when the user says "what has ThumbGate blocked", "show gate stats", "is enforcement working", "how many tokens did we save", "show the enforcement matrix", or "what got stopped". Do NOT use to list rule DEFINITIONS that exist (use the thumbgate-rules skill), to create a new rule (use the thumbgate-guard skill), or to check whether ThumbGate is installed and wired (use the thumbgate-doctor skill).
23SKILL.mdUpdated Jun 12, 2026