roborew/hotfix
skills/hotfix/SKILL.md
Minimal emergency fix from main, hotfix branch, [HOTFIX] PR
data-ai
Updated Jun 2, 2026
$ install --global
skillsauthnpx skillsauth add roborew/opencode hotfixInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 3, 2026, 2:36 AM118.0s1 file scanned
SKILL.md
- name:
- hotfix
- description:
- Minimal emergency fix from main, hotfix branch, [HOTFIX] PR
Hotfix workflow
- Confirm production urgency and scope.
git fetchand branchhotfix/<short-slug>frommainor default release branch (ask user).- Make the smallest change that fixes the incident. No drive-by refactors.
- Run only tests relevant to the touched paths.
- Open PR with
[HOTFIX]prefix; describe rollback.
GitHub issue path (when architect delegates)
For non-emergency hotfix planning in OpenCode, architect may first publish a single to-issues slice labelled mode:hitl before you implement. Follow that issue contract when orchestrate delegates execution.
Stop conditions
- If change touches >3 files or alters public APIs, warn: likely not a hotfix — use normal feature flow.
Git safety (same as ship)
Never: force push (unless user + OPENCODE_ALLOW_FORCE_PUSH=1 for --force-with-lease only), git reset --hard, git clean -f / -fd, git branch -D, git checkout ., git restore ., destructive rm -rf on / or ~. Validate with scripts/preflight-git.sh '<command>' when unsure. See scripts/block-dangerous-git.sh for hook-shaped checks.
Related Skills
roborew/code-review
tools
VerifiedTrustedCommunity
AI-powered code review using CodeRabbit CLI. Use only on explicit user request or when parent passes execution_mode orchestrate_coderabbit_gate. Do not run during orchestrated stage/issue work.
SKILL.mdUpdated Jun 5, 2026
roborew/fanout-issues
tools
VerifiedTrustedCommunity
Cross-repo companion to to-prd: after PRD frontmatter is filled, run bin/fanout <slug> from this spec repo to create child GitHub issues (one per ticket or legacy slice).
SKILL.mdUpdated Jun 2, 2026
roborew/triage
tools
VerifiedTrustedCommunity
Issue state machine — transition GitHub issue labels per docs/agents/triage-labels.md. Batch helpers via lib/triage.sh.
SKILL.mdUpdated Jun 2, 2026
roborew/to-prd
documentation
VerifiedTrustedCommunity
Synthesise a PRD from grill-me / research context, write docs/prd/<slug>.md, publish a GitHub issue with prd + state:ready-for-agent + feature:<slug>. Halt after publish — do not invoke fanout.
SKILL.mdUpdated Jun 2, 2026