Borrowing it
Nothing to install: this file belongs to changoo89/claude-pilot. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/changoo89/claude-pilot/main/.claude/skills/quality-gates/SKILL.mdgit clone --depth 1 https://github.com/changoo89/claude-pilotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/changoo89/claude-pilot/quality-gates)<a href="https://agentmods.dev/skills/changoo89/claude-pilot/quality-gates"><img src="https://agentmods.dev/badge/skills/changoo89/claude-pilot/quality-gates/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/changoo89/claude-pilot/quality-gates"><img src="https://agentmods.dev/badge/skills/changoo89/claude-pilot/quality-gates.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00023 | $0.01097 |
| Opus 5 | $0.00012 | $0.00549 |
| Sonnet 5 | $0.00005 | $0.00219 |
| Haiku 4.5 | $0.00002 | $0.00110 |
Grade A, and why
quality-gates scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SKILL: Quality Gates
Purpose: Pre-commit quality validation procedures (type-check, lint, todos, branch guard) Target: Coder Agent, pre-commit hooks, CI/CD pipelines
Quick Start
When to Use This Skill
- Before committing code (pre-commit hooks)
- Validating code quality in CI/CD
- Ensuring all todos complete before commit
- Preventing commits to protected branches
Quick Reference
# Type check validation
npm run type-check # or: tsc --noEmit
# Lint validation
npm run lint # or: eslint . --ext .ts,.tsx
# Todo validation
/03_close # Validates all SCs complete before closing plan
# Branch guard (Git native)
git config --global receive.denyDeleteCurrent warn
Core Concepts
Quality Gates Philosophy
Pre-commit hooks enforce quality standards before code enters the repository.
Skills as procedures, hooks as automation:
- Skills document the what and how (this file)
- Hooks execute the procedures automatically
- CI provides fallback enforcement
- Developer autonomy preserved (opt-in hooks)
Why Opt-In Hooks?
- Mandatory hooks improve baseline quality but create friction
- Skills + CI yields consistent enforcement while preserving autonomy
- Developers can choose strictness level (off/stop/strict profile)
Procedures
Type Check Validation
Command: tsc --noEmit or npm run type-check
Output: Success (exit 0) | Type errors with file/line (exit 1)
Example Failure: src/auth/login.ts:15:11 - error TS2345: Argument of type 'string' is not assignable to parameter of type 'number'.
Lint Validation
Command: npx eslint . --ext .ts,.tsx or npm run lint
Output: Success (exit 0) | Lint errors with file/line/rule (exit 1)
Example Failure: src/utils/format.ts:42:5 error Unused vars no-unused-vars
Todo Validation
Command: /03_close
Steps: Read plan → Check all SCs [x] → Verify evidence → Block if incomplete
Example Block: ⚠️ Incomplete SCs detected: - [ ] SC-3: Add unit tests (evidence missing)
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 146 lines · 23 tokens per session scan A 0d061445e48b
quality-gates is a skill published in the GitHub repository changoo89/claude-pilot (20 stars, last pushed 7mo ago), licensed MIT. It adds 23 tokens to every session and 1,097 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
OCR Review-to-Approval Loop
Drive a PR to an approved code review by looping OCR's multi-agent review and address steps. Runs /ocr:review then /ocr:address repeatedly until the review verdict is APPROVE, then one final /ocr:address for leftover suggestions, posting every review and every address round to the GitHub PR as comments. Use when the…
workspace-diff-review
Reviews the current workspace diff with a pre-landing mindset.
devops-assistant
Assists in version control, deployment, and automation tasks, ensuring smooth DevOps operations and workflow efficiency.
audit-pr
Audit a whole PR against the delivery contract and return MERGE-READY or evidenced blockers with the full URL. Consumes the current review-change REVIEW-PASS receipt instead of re-running review axes; posts a SHA-bound ready comment; never edits or merges. Triggers: "audit-pr", "is this PR ready", "merge gate".
pr-triage
Triage a PR's unresolved review comments with you, deciding per comment whether to act on it, defer it, or record your reasoning for the reply YOU will write. Never drafts or posts replies; read-only GitHub access. Manual trigger only: /pr-triage [PR]. Skip on a single directed comment ("just fix #3").
hunk-release
Prepares, publishes, verifies, and curates Hunk releases. Use for release metadata, benchmarks, tags, publishing, release videos, backports, or recovery.