Menu
Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors).
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use when reviewing a diff, PR, or change set for correctness and quality before merge or handoff. For a deep security-only pass, use security-review instead.
Use when bringing this repo into compliance with a GeneFoundry fleet standard (tool-naming, response-envelope, container-hardening, versioning, MCP transport, or logging) or closing its tracking issue.
Use when preparing to tag, publish, or deploy a genefoundry-router build.
Use when reviewing genefoundry-router security before deploy, when touching auth/proxy/logging/limits config, or when answering an infosec/DSB question.
Use when changing the router's authentication or authorization — JWT/OAuth modes, verifiers, resource/audience metadata, the secure-by-default bind guard, or the no-token-passthrough boundary.
Use when adding, removing, enabling/disabling, or reconfiguring a backend in the router's servers.yaml registry (URLs, namespaces, entrypoints, server_name/transform overrides).
| name | ci-failure-triage |
| description | Use when `make ci-local` fails locally or a GitHub Actions run reports a CI failure (format, lint, line-budget, typecheck, or test errors). |
Follow AGENTS.md first.
make ci-local and read the log to see which sub-target failed. It typically chains format-check lint-ci lint-loc typecheck test-fast test-integration, but repos vary (e.g. clinvar-link has no lint-loc) — trust the actual recipe/CI log, not this list.format-check) — run make format, re-check.lint-ci) — run make lint-fix; fix remaining findings by hand rather than blanket-ignoring.lint-loc, the per-file line budget in scripts/check_file_size.py, where present) — split the growing module along its seams; edit .loc-allowlist only with a tracked decomposition reason.typecheck) — run make typecheck; fix the type, don't add broad ignore_errors / # type: ignore.test-fast / test-integration) — fix code or test per the assertion; parser/data changes need fixture-backed coverage under tests/.make ci-local until green before handoff..loc-allowlist to dodge a needed split.ci-local.