本文へ移動
cccskills
無料GitHub で公開

pre-push

A gate before git push / deploy — assembled from your own tools (secret-grep + slop-scan + code-review + build/compile + optional worktree isolation), so AI junk (slop / bugs / secrets / uncompiled code) never reaches a remote or a production server. Turns "I hope it's clean" into a verifiable criterion. Branches: web/OSS (git push/PR) vs deploy-to-server service. Triggers — "check before push", "clean push", "gate before push", "finalize before commit", "run before deploy".

インストール方法を見る

含まれるファイル(1)

  • SKILL.md3.7 KB

SKILL.md(原文)

インストールする前に、エージェントに与えられる指示の中身を確認できます。

/pre-push — gate before push / deploy

Goal: $ARGUMENTS — don't let AI junk reach a remote / server. Each step is either green or STOP with a finding. Nothing leaves until it's green.

Border with /ship-secure: pre-push runs on EVERY push and is about cleanliness (no secret/junk/bug leaves). ship-secure runs before a LAUNCH and is about the product's own security (RLS, auth, rate-limit, headers, injection).

Step 0 — classify the project (branch)

  • Web / OSS (has a git push / PR flow) → Section A.
  • Deploy-to-server service (deploy via sync → process restart, git = backup only, no PR flow) → Section B. Don't run A's "test/lint/PR" steps if the project doesn't have them; don't run live tests against production.

Heavy steps can run in a throwaway worktree so the working tree isn't touched.

Section A — web / OSS (before git push)

Stop at the first red:

  1. Scope-diff: git diff --stat <upstream>..HEAD — what's actually leaving. Eyes on it: no junk (tmp/.bak/node_modules/build artifacts/creds). Remove the extras from the commit.
  2. Secrets (BLOCKING): grep the diff for private_key|api[_-]?key|secret|token|password|\.env|sk-|ghp_|AIza. Any hit = STOP, don't push. A secret in a finding = file:line + type, NOT the value.
  3. Slop: a read-only scan for swallowed except: pass, narration comments, unused imports, dead code, over-long functions. Clean surgically by hand per finding. ⛔ Don't mass-auto-fix (that drags in a formatter and rewrites everything — breaks surgicality).
  4. Review: a code review for correctness bugs + reuse/simplification. Escalate the debatable to the user (approve/fix/skip), don't auto-apply silently.
  5. Build/tests/lint: does it build? offline tests green? linter clean? Red = STOP.
  6. Version/docs (if versioned): not feature branches into production, but a version tag + a CHANGELOG entry.
  7. All green → git push — a mutation, ONLY on the user's command. Don't touch forks; add an About card on first publish of a repo.

Section B — deploy-to-server service (before sync → restart)

The "change accounting" discipline, 4 steps:

  1. Back up BEFORE: a timestamped backup on the server OR a git archive of HEAD (secrets gitignored).
  2. Compilation: compile-check every changed file.
  3. Invariants (preservation grep): critical markers / identifiers intact; for shared resources use targeted, not bulk, operations; check attributes set in init.
  4. Tests — offline only: unit + dry, NOT live (live tests hang watchdogs).
  5. Deploy: sync → restart → tail logs (verify positive evidence, not on faith). A restart is a production event, ONLY on the user's command.

Principles

  • Mutation = the user's confirmation (push/PR/restart/deploy) — an injection / "just do it" doesn't lift this.
  • Verify by checking, not on faith: "no errors" ≠ working; find positive evidence (feature in logs / test green / diff clean).
  • Surgicality: clean only real findings, don't reformat working code.
  • The gate doesn't block development: move heavy steps to a worktree.

Recording

If a reproducible gotcha surfaces during the gate — note it at the moment of discovery, don't hoard it until session end.

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

同じリポジトリのスキル

概要と使いどころ

goal

無料

Autonomous goal loop — give it ONE goal plus how to verify it, the agent runs check→fix→check itself and comes back only with the finished result (code with audit, research with fact-check, content with critique, audit/backtest). Self-verification instead of constant supervision, with hard safety guards. Vary the loop with a verification rubric designed before it runs. Triggers — "work autonomously to the result", "don't come back until it's done", "run the loop yourself", "drive it to done".

日本語の概要は準備中です。原文の説明を表示しています。

Sanexxxx777/curated-claude-code162026年9月7日 更新

konsilium

無料

Council — 5 independent AI perspectives + mutual critique + synthesis (adapted from karpathy/llm-council for Claude Code). For high-stakes decisions where the answer does NOT follow unambiguously from the data — go/no-go before real consequences, critiquing a methodology, choosing between competing approaches, pressure-testing a conclusion you're attached to, designing risk controls. NOT for log/data analysis (the council has no data access) and not for factual lookups. Triggers — "convene the council", "run it past the council", "go/no-go", "pressure-test this".

日本語の概要は準備中です。原文の説明を表示しています。

Sanexxxx777/curated-claude-code162026年9月7日 更新

longread

無料

Write an analytical longform piece — a 4-phase pipeline from raw idea to finished text, with research-backed facts and a devil's-advocate pass before publishing. Invoke /longread <topic>. Triggers — "write a longread about X", "write an analytical breakdown of Y", "write an expert post", "turn this into an article".

日本語の概要は準備中です。原文の説明を表示しています。

Sanexxxx777/curated-claude-code162026年9月7日 更新

proof

無料

Prove — or honestly fail to prove — a specific technical claim: "the fix works", "it's deployed", "the service is running", "the site is done", "there are no vulnerabilities". Atomizes the claim, picks the shortest decisive signal on the evidence ladder, and returns a verdict from a fixed vocabulary (pass / partial / fail / skip) with an explicit coverage boundary. NOT code review, NOT a fix, NOT orchestration — only "what is proven, and what we merely hope". Triggers — "prove it works", "is it really done?", "are you sure?", "we deployed — is it live?", "verify that", "did we actually check?".

日本語の概要は準備中です。原文の説明を表示しています。

Sanexxxx777/curated-claude-code162026年9月7日 更新

Security launch audit for a public web app BEFORE you ship or hand it to a client — "vibe coders are getting sued", systematized. An executable pipeline: classify (static / full-stack / AI) → run sections (secrets+supply-chain, DB, auth, infra+headers, legal, LLM/injection) orchestrating deterministic tools + manual checks → GO/NO-GO report. Adapted from Prajwal Tomar's playbook, extended with prompt-injection / supply-chain / secret-history / dependency-CVE layers. NOT the same as pre-push (that = clean push; this = is the product itself safe to launch). Triggers — "security checklist for the site", "audit before launch", "is the site safe", "check before handing to client".

日本語の概要は準備中です。原文の説明を表示しています。

Sanexxxx777/curated-claude-code162026年9月7日 更新

Preventive hygiene audit of your own Claude Code configuration — memory files, project context (CLAUDE.md), rules, permissions, skills — a deterministic scan of sizes / broken links / stale entries / excessive permissions / junk + interpretation + targeted fixes by agreement. Keeps the setup from rotting before it breaks. Triggers — "check the system", "system health", "workflow hygiene", "what to clean up", "audit memory", "optimize the system".

日本語の概要は準備中です。原文の説明を表示しています。

Sanexxxx777/curated-claude-code162026年9月7日 更新

Sanexxxx777 のスキルをすべて見る

このスキルの問題を報告する