quality-gate/SKILL.md
Use when the user wants to run the project's lint + types + build sequence as a gate before pushing, opening a PR, or merging. Invoked by chained dev skills between phases. Trigger phrases - "/quality-gate", "run the quality gate", "check it builds".
npx skillsauth add paulund/ai quality-gateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Run the project's static-checks + build sequence. Stop on the first failure, diagnose the root cause, and fix it before re-running.
Read package.json scripts (or equivalent for the project: composer.json, Makefile, Cargo.toml). Pick the first command from each row that exists:
| Phase | Preferred | Fallback |
|---|---|---|
| Lint | pnpm lint / npm run lint | npx next lint, composer run lint |
| Types | pnpm types / npm run types | npx tsc --noEmit |
| Tests | pnpm test / npm test | composer run test, framework default |
| Build | pnpm build / npm run build | npx next build |
If a phase has no command for the project (e.g. a JS-only repo with no types script), skip that phase and continue.
Run the four phases sequentially. Each must pass before the next runs.
<lint command>
<types command>
<tests command>
<build command>
git log / git blame / existing tests for context.Max 2 diagnose-fix cycles. If still failing, stop and surface the failure to the caller — don't hide it.
On success: one-line confirmation listing the phases that ran (lint, types, tests, build).
On failure: the failing phase, the command that ran, and the first ~20 lines of error output.
pnpm everywhere.tools
Use when the user wants to verify a PR's feature works at runtime by booting the dev server, exercising the affected UI via Chrome DevTools MCP, and posting a screenshot summary back to the PR. Idempotent — skips if `verified` or `verify-failed` is already on the PR. Trigger phrases - "/pr-verify", "verify this PR", "runtime check the pr".
testing
Use when the user wants a security-focused review pass on a PR with findings actioned as commits on the same branch. Trigger phrases - "/pr-security-review", "security review and fix".
testing
Use when the user wants to open a pull request for an already-pushed branch that implements a specific issue. Idempotent — returns the existing PR if one is already open for the branch. Trigger phrases - "/pr-open", "open the pr", "create pr for this branch".
testing
Use when the user wants to action external review feedback or fix CI failures on an open pull request. Single-purpose — does not handle merge conflicts (use merge-main) or open PRs (use pr-open). Trigger phrases - "/pr-fix", "fix the pr", "address review comments", "fix ci".