change-control

Classifies changes and enforces lint, test, and build gates before merging pull requests.

Updated Jul 3, 2026
One-click install
npx skills add https://github.com/MarineTeam/fable-video --skill change-control-marineteam
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: change-control
Source: https://github.com/MarineTeam/fable-video/tree/main/.claude/skills/change-control
Command: npx skills add https://github.com/MarineTeam/fable-video --skill change-control-marineteam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? It prevents unsafe or unverified changes from reaching the production Marine Video Portal by defining exactly which checks, rules, and review steps apply to every type of edit before a PR is opened. ## Core Features & Use Cases - Change classification: Maps each edit type (docs-only, lib logic, API route, page UI, security-touching, config, dependency, CI workflow) to its required gates and the sibling skill to consult first. - Gate enforcement: Specifies the exact lint, test, and build commands with expected outputs, including the CI-equivalent build one-liner with dummy env vars. - Non-negotiable rules: Documents 14 incident-backed rules (capability guards, error logging, no CDN URLs, no lockfiles, Redis key namespacing, cache invalidation, secret handling, rate limiting, audit logging, fail-open/closed semantics) with file:line evidence. - Use Case: Before editing pages/api/admin/share.js, classify it as security-touching, run all three gates, verify the capability guard precedes the method check, and walk the full self-review checklist before opening the PR. ## Quick Start Ask the assistant to review your planned change to the Marine Video Portal repo and tell you which gates to run and which non-negotiable rules apply before you open a pull request.

Frequently Asked Questions about change-control

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I know which checks to run before opening a PR?

Classify your change using the table in section 1: docs-only changes need no local gates, lib logic needs lint and test, API routes and pages need all three gates, and security-touching files need all gates plus the full self-review checklist.

What are the required gates for a Next.js API route change?

API route changes under pages/api/** require npm run lint, npm test, and npm run build, in that order. You should also consult the architecture-contract skill first for guard, logging, and rate-limit patterns.

Why does npm run build fail locally with missing env vars?

The Next.js build requires Auth0, Bunny, and Upstash env vars to be present. Reproduce CI's build locally using the documented one-liner that supplies the same dummy values defined in .github/workflows/ci.yml.

Why is CI red when all local gates pass?

The repo has no lockfile by design, so CI resolves fresh dependency versions within package.json caret ranges on Node 22. Version drift can fail CI even when local passes; route this to the dependency-currency skill.

When should I not use this change-control workflow?

Use sibling skills instead for other tasks: debugging-playbook for runtime failures, security-response for CodeQL alerts, dependency-currency for version bumps, and architecture-contract for understanding system invariants.