What problem does it solve? Code changes often get committed without independent verification, letting security flaws, logic errors, and regressions slip through. This Skill enforces a pre-commit verification pipeline so no agent (or developer) approves its own work. ## Core Features & Use Cases - Static Security Scanning: Greps added diff lines for hardcoded secrets, shell injection, eval/exec, unsafe pickle deserialization, and SQL injection patterns. - Baseline-Aware Quality Gates: Runs pytest, npm test, cargo test, or go test plus linters (ruff, mypy, eslint, clippy, go vet), comparing against a pre-change baseline so only NEW failures block the commit. - Independent Reviewer Subagent: Dispatches a fresh-context reviewer via delegate_task that returns a fail-closed JSON verdict on security concerns and logic errors. - Auto-Fix Loop: Spawns a separate fix agent for up to 2 fix-and-reverify cycles, then commits with a [verified] prefix on success. - Use Case: After implementing a feature touching multiple files, run this pipeline before git push to catch a leaked API key and a missing error handler that self-review would have missed. ## Quick Start Ask the agent to verify and review my staged changes before committing them.
