jwill9999/guardrails
.cursor/skills/guardrails/SKILL.md
Validation pipeline and quality gates for the Conscius project. Use this skill when a task enters review state, running the guardrails pipeline, checking code quality before a PR, or understanding what quality checks are required. Triggers on tasks involving guardrails, review, validation pipeline, quality gate, pre-PR checks, or entering review.
development
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add jwill9999/conscius guardrailsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 1:25 AM5.0s1 file scanned
SKILL.md
- name:
- guardrails
- description:
- Validation pipeline and quality gates for the Conscius project. Use this skill when a task enters review state, running the guardrails pipeline, checking code quality before a PR, or understanding what quality checks are required. Triggers on tasks involving guardrails, review, validation pipeline, quality gate, pre-PR checks, or entering review.
Guardrails pipeline
Tasks follow this lifecycle: todo → in_progress → review → done.
On entering review, run the full validation pipeline in order:
Pipeline steps
| Step | Command | Must pass before proceeding |
| ---------------------- | ---------------------------------------------------- | ----------------------------- |
| 1. Format | npx nx format:write | No uncommitted format changes |
| 2. Lint | npx nx lint <project> | Zero errors |
| 3. Typecheck | npx nx typecheck <project> | Zero errors |
| 4. Unit tests | npx nx test <project> | All tests pass |
| 5. Full suite (pre-PR) | npx nx run-many -t typecheck,lint,test,build --all | All packages pass |
| 6. Agent review | Read PR comments for SonarCloud + Sourcery feedback | Quality Gate passed |
If any step fails: fix issues → rerun from that step.
Quality tools
| Tool | Purpose | Runs on |
| --------------------------------------------- | --------------------------------------------------------- | ------------------------- |
| Nx (typecheck, lint, test, build) | Local quality gates | Every task branch, pre-PR |
| Sourcery AI | Automated PR code review, architecture diagrams | Every PR (GitHub bot) |
| SonarCloud | Static analysis, security hotspots, coverage, duplication | Every PR + main |
SonarCloud action thresholds
- Bugs / Vulnerabilities — fix before merge (blocking)
- Security Hotspots — review and fix or mark as reviewed with justification
- Code Smells — fix if straightforward; log as backlog task if complex
- Coverage — gates enforced once unit test suite is established
Running the pipeline locally
# Format
npx nx format:write
# Single project
npx nx run-many -t typecheck,lint,test --projects=<project>
# All projects (pre-epic-PR)
npx nx run-many -t typecheck,lint,test,build --all
# Affected only (faster on feature branches)
npx nx affected -t typecheck,lint,test
Related Skills
jwill9999/session
testing
VerifiedTrustedCommunity
Manage SESSION.md and SUMMARY.md for the Conscius project. USE WHEN: user says 'update session', 'update SESSION.md', 'end of session', 'taking a break', 'stepping away', 'compress conversation', 'add summary', or when completing an epic/task and session state needs recording. EXAMPLES: 'update the session', 'let's update session.md', 'add a summary segment', 'I am done for today'.
SKILL.mdUpdated Apr 16, 2026
jwill9999/pr-review
testing
VerifiedTrustedCommunity
PR review workflow for the Conscius project. USE WHEN: user opens a pull request, asks to check CI status, mentions SonarCloud or Sourcery feedback, asks if a PR is ready to merge, or needs to resolve a merge conflict. EXAMPLES: 'check if the PR is ready', 'CI failed on my PR', 'SonarCloud flagged something', 'is this ready to merge?', 'fix merge conflict', 'review PR feedback'.
SKILL.mdUpdated Apr 16, 2026
jwill9999/planning
tools
VerifiedTrustedCommunity
Plan, document, and manage epics, features, tasks, and backlog items for the Conscius project. Creates entries in both the markdown planning docs (docs/planning/) and the Beads task graph (bd CLI). Use this skill for all planning work. Supported slash commands: /new-epic, /new-feature, /add-task, /update-status, /close-feature, /archive-feature, /new-backlog, /move-to-feature, /list-features, /list-backlog, /sync-beads, /help /planning
SKILL.mdUpdated Apr 16, 2026
jwill9999/nx-workspace
development
VerifiedTrustedCommunity
Explore and understand Nx workspaces. USE WHEN answering questions about the workspace, projects, or tasks. ALSO USE WHEN an nx command fails or you need to check available targets/configuration before running a task. EXAMPLES: 'What projects are in this workspace?', 'How is project X configured?', 'What depends on library Y?', 'What targets can I run?', 'Cannot find configuration for task', 'debug nx task failure'.
SKILL.mdUpdated Apr 16, 2026