What problem does it solve? Code written by an AI agent is often committed without independent verification, letting security flaws, logic errors, and regressions slip through. This Skill enforces a pre-commit verification pipeline so no agent verifies its own work. ## Core Features & Use Cases - Static Security Scanning: Greps added diff lines for hardcoded secrets, shell injection, eval/exec, unsafe pickle deserialization, and SQL injection patterns. - Baseline-Aware Quality Gates: Runs pytest, npm test, cargo test, or go test plus linters (ruff, mypy, eslint, clippy, go vet) and only blocks on NEW failures versus the pre-change baseline. - Independent Reviewer Subagent: Dispatches a fresh-context reviewer via delegate_task that returns a fail-closed JSON verdict on security concerns and logic errors. - Auto-Fix Loop: Spawns a separate fix agent for up to 2 fix-and-reverify cycles, then commits with a [verified] prefix on success. - Use Case: After implementing a feature across several files, say "verify before commit" and the pipeline scans the diff, runs tests, gets an independent review, fixes any findings, and commits only when everything passes. ## Quick Start Verify my staged changes with the pre-commit review pipeline and commit them if everything passes.
