What problem does it solve? Code written by an agent or developer often ships with security flaws, regressions, or logic errors because the same context that wrote the code cannot objectively review it. This Skill enforces a pre-commit verification pipeline so defects are caught before they land in the repository. ## Core Features & Use Cases - Static Security Scanning: Greps added diff lines for hardcoded secrets, shell injection, eval/exec, unsafe pickle deserialization, and SQL injection patterns. - Baseline-Aware Quality Gates: Runs pytest, npm test, cargo test, or go test plus linters (ruff, mypy, eslint, clippy, go vet) and only blocks on NEW failures relative to a stashed baseline. - Independent Reviewer Subagent: Dispatches a fresh-context reviewer via delegate_task that returns a fail-closed JSON verdict on security concerns and logic errors. - Auto-Fix Loop: Spawns a separate fix agent for up to two fix-and-reverify cycles before escalating to the user. - Use Case: After implementing a feature touching multiple files, run this pipeline before git commit so a verified change lands with a [verified] commit prefix. ## Quick Start Verify my staged changes with the pre-commit review pipeline and commit them if everything passes.
