skills/stage-review/SKILL.md
Stage a finished local feature, run local verification, create a Conventional Commit, then send it through the no-mistakes gated review/fix loop before real upstream push/PR. Use when the user says a feature is done, asks for a professional stage-review flow, wants Codex to git add and commit safely, or wants no-mistakes review/verify/fix before pushing to origin.
npx skillsauth add regenrek/agent-skills stage-reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this as the finished-feature workflow: inspect changes, verify locally, stage explicit files, create a Conventional Commit, push through no-mistakes, attach to the run, fix findings, rerun, and let no-mistakes perform the real upstream push/PR only after the gate passes.
git push origin in this workflow.git add .; use explicit paths or the bundled script's --all only after the user explicitly wants all current changes included.git push no-mistakes.feat|fix|refactor|build|ci|chore|docs|style|perf|test..no-mistakes.yaml, justfile, package.json, Makefile, go.mod, Cargo.toml, or equivalent project config.Resolve scripts/stage_review.py relative to this skill folder, then run:
python3 <skill-dir>/scripts/stage_review.py --cwd . plan
python <skill-dir>/scripts/stage_review.py --cwd . plan
Also run:
git status --short --branch
git diff --stat
Stop and ask if:
origin existsno-mistakes remote exists and no-mistakes init has not been approvedRun the repo's real local checks before staging. Prefer explicit commands from .no-mistakes.yaml:
commands:
test: "..."
lint: "..."
format: "..."
If no config exists, inspect repo-local command surfaces and choose the canonical one. Examples:
just test, just lint, just fmtmake test, make lint, make fmtpnpm test, pnpm lint, pnpm typecheckgo test ./..., go vet ./...cargo test, cargo clippy --all-targets -- -D warningsDo not commit if relevant local checks fail unless the user explicitly wants a broken checkpoint.
Pick the Conventional Commit subject from the actual diff:
feat(scope): concise summary
fix(scope): concise summary
refactor(scope): concise summary
Stage explicit files:
python3 <skill-dir>/scripts/stage_review.py --cwd . commit \
-m "feat(scope): concise summary" \
--body "Tests: <commands run>" \
path/to/file1 path/to/file2
Use all changed files only when the user explicitly confirms all changes belong in the feature:
python3 <skill-dir>/scripts/stage_review.py --cwd . commit \
-m "feat(scope): concise summary" \
--body "Tests: <commands run>" \
--all
Confirm the exact command first:
Ready to push <branch> through no-mistakes:
git push no-mistakes <branch>
After confirmation:
git push no-mistakes <branch>
no-mistakes
For each no-mistakes finding:
rebase, review, test, document, lint, push, pr, or cino-mistakes rerun or continue/attach as appropriateUseful commands:
no-mistakes status
no-mistakes runs --limit 10
no-mistakes attach
no-mistakes rerun
Finish only when you can report:
tools
Live-test any Electron desktop app with native-devtools-mcp, Chrome DevTools Protocol, screenshots, OCR, and accessibility tools. Use when the user asks for Electron UI verification, MCP-driven app control, renderer CDP interaction, native desktop automation, screenshots, or OCR-driven checks.
testing
Find, clone, inspect, and summarize high-quality GitHub reference repositories for coding agents. Use when a user asks for GitHub reference projects, examples, prior art, inspiration, implementation patterns, or includes "$search-context" in a coding prompt.
testing
Run or install repo security leak checks with BetterLeaks and Trivy. Use when asked to scan for leaked secrets, vulnerable dependencies, misconfigurations, add secret-leak guardrails, add BetterLeaks, add forbidden-path hooks, or run secleak-check before release.
development
Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks, CI install checks, and optional incident IOC profiles.