Run ship-safe security and quality audit on the current project. Executes npx ship-safe audit . and reports findings by severity. Use before shipping any feature or PR.
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
Runs ship-safe — a pre-ship security and quality scanner that checks for secrets, vulnerabilities, and risky patterns before code reaches production.
npx ship-safe audit .
Run from the project root. No install required (npx fetches it on demand).
Ship-safe is disabled by default. To enable it:
ENABLE_SHIP_SAFE=true in GitHub → Settings → VariablesENABLE_SHIP_SAFE=true before invoking /ship-safeOnly run if ENABLE_SHIP_SAFE=true is set. When enabled, appropriate moments are:
| Symbol / keyword | Severity | Action |
|---|---|---|
✓ PASS / ok / no issues | Clean | Safe to ship |
⚠ WARN / MEDIUM / LOW | Advisory | Review before shipping |
✗ FAIL / ERROR / CRITICAL / HIGH | Blocker | Must fix before shipping |
npx ship-safe audit . from the repo root./ship-safe
The skill runs the audit, colors findings by severity, and surfaces blockers before any merge action.
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Run WCAG 2.2 Level AA accessibility audits against generated UI. Use when a story has ui:true or when asked to audit accessibility.
The English summary is being prepared. Showing the original description.
Generate a complete component file tree wired to design tokens with tests and Gherkin spec. Use when scaffolding a new UI component.
The English summary is being prepared. Showing the original description.
Extract Gherkin scenarios from story markdown files into runnable .feature files and generate step definition stubs. Use when syncing stories to test suites.
The English summary is being prepared. Showing the original description.
Read and write design tokens in W3C DTCG format (tokens.json) and emit CSS, Tailwind, and Mantine outputs. Use when modifying or generating design tokens.
The English summary is being prepared. Showing the original description.
Apply Docker and Docker Compose best practices for containerising services. Use when writing or reviewing Dockerfiles and compose configs.
The English summary is being prepared. Showing the original description.
Identify and annotate cloud cost implications of architectural decisions. Use when reviewing infrastructure changes or designing new services.
The English summary is being prepared. Showing the original description.