quality-gate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited quality-gate (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Automated quality enforcement with two hooks:
Fires on every session stop. Runs JavaScript/TypeScript checks on changed files:
| Check | Tool | Severity |
|---|---|---|
| Types | tsc --noEmit | BLOCK |
| Lint | eslint | BLOCK on errors, WARN on warnings |
| Format | prettier --check | WARN |
| Tests | jest | BLOCK |
| Dead code | knip (unused exports, deps, files) | WARN |
| Type coverage | type-coverage (>80% threshold) | WARN |
| Circular deps | madge --circular | WARN |
| TODO/FIXME | grep scanner | WARN |
Behavior:
Intercepts git push commands. Runs 4 scanners in sequence:
--config=autoSONARQUBE_URL and SONARQUBE_TOKEN env vars, plus sonar-project.propertiesSONARQUBE_TOKEN is not set| Env Var | Default | Purpose |
|---|---|---|
CLAUDE_QUALITY_GATE | 1 | Enable/disable quality gate |
CLAUDE_QUALITY_GATE_MAX_RETRIES | 3 | Max retry attempts before allowing stop |
SONARQUBE_URL | https://sonarqube.internal | SonarQube server URL |
SONARQUBE_TOKEN | (none) | SonarQube auth token |
CLAUDE_NOTIFY_DISCORD | 0 | Send Discord notifications |
DISCORD_WEBHOOK_URL | (none) | Discord webhook for notifications |
/quality run — Run checks manually/quality status — View gate status and recent results/quality config — See active checks and tool availability~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.