소스 정보
- 저장소
- andrem-sec/psc-comet
- 최근 소스 활동
- 2026년 4월 1일 00:39
- 감지된 SKILL.md 언어
- 영어
- 스타
- 4
- 포크
- 0
설치 방법
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
소스 파일 검토
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
메뉴
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/andrem-sec/psc-comet --skill verification-loop명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
SKILL.md 표시 중
SOC 직업 분류 기준
| name | verification-loop |
| description | 6-phase pre-PR verification sweep with structured PASS/FAIL reporting |
| version | 1.0.0 |
| level | 2 |
| triggers | ["/verify","verify before commit","pre-commit check","ready for PR"] |
| context_files | ["context/project.md"] |
| steps | [{"name":"Language Detection","description":"Auto-detect project language and available tooling"},{"name":"Build Phase","description":"Run build and capture errors"},{"name":"Type Check Phase","description":"Run type checker (if applicable)"},{"name":"Lint Phase","description":"Run linter (full mode only)"},{"name":"Test Suite Phase","description":"Run tests with coverage (full mode only)"},{"name":"Security Scan Phase","description":"Scan for secrets and debug output (pre-pr mode only)"},{"name":"Generate Report","description":"Output structured VERIFICATION REPORT with final verdict"}] |
Comprehensive pre-commit and pre-PR verification. Runs the quality checks humans forget.
Without structured verification, Claude either:
The verification loop ensures every check runs, every failure is recorded, and the final state is unambiguous.
quick (default): Build + type check only. Fast feedback for iterative development.
full: Build + types + lint + tests + coverage (80% minimum). Standard pre-commit sweep.
pre-commit: Full suite + git status verification (no uncommitted changes in critical paths).
pre-pr: Full suite + security scan (secrets, debug output, credential files). Release gate.
Auto-detect from project files:
If multiple languages present, run checks for all detected languages.
Run the build command appropriate to the detected language:
tsc --noEmit or build scriptgo build ./...cmake --build or makebash -n on all .sh filesCapture all errors. Do not stop at first failure.
Language-specific type checking:
mypy with strict modetsc --noEmitRecord all type errors with file:line references.
Run linter and capture warnings/errors:
ruff check or pylinteslintgolangci-lint runclang-tidyshellcheckTreat errors as blocking. Warnings are informational only.
Run test suite with coverage:
pytest --cov --cov-report=termjest --coverage or vitest --coveragego test -cover ./...ctest or run test binariesCoverage threshold: 80% minimum for PASS verdict.
If tests exist but coverage is below threshold: FAIL with specific gap report.
If no tests exist: WARN but do not fail (legacy code exception).
Three scans:
Secrets scan: Grep staged files for:
api[_-]?key\s*[=:]\s*['\"][a-zA-Z0-9_-]{10,})password\s*[=:]\s*['\"][^'\"]{4,})token\s*[=:]\s*['\"][a-zA-Z0-9_-]{20,})Debug output scan: Grep source files for:
console.log (JavaScript/TypeScript)print( or pprint( (Python)fmt.Print (Go)std::cout (C++)Credential files: Check for staged:
.env, .env.local, .env.productioncredentials.json, secrets.json*.pem, *.key, id_rsa, id_ed25519VERIFICATION REPORT
Mode: [quick|full|pre-commit|pre-pr]
Timestamp: [ISO 8601]
Language(s): [detected languages]
Phase Results:
[✓] Build .................... PASS
[✓] Type Check ............... PASS
[✓] Lint ..................... PASS (full+ only)
[✗] Test Suite ............... FAIL: 3 tests failing
[✓] Coverage (80% min) ....... PASS: 87%
[✓] Security Scan ............ PASS (pre-pr only)
Verdict: NOT READY
Blocking Issues:
1. test_auth.py::test_login_flow - AssertionError at line 45
2. test_auth.py::test_logout - KeyError: 'session_id'
3. test_api.py::test_rate_limit - Timeout after 5s
quick: After each significant edit, before committing. Fast iteration.
full: Before git commit. Ensures local quality bar.
pre-commit: In pre-commit hook (optional). Prevents broken commits.
pre-pr: Before git push or creating PR. Release gate.
Do not skip phases when they fail. Collect all failures before reporting.
Do not treat warnings as errors unless the project has a zero-warning policy.
Do not run full verification in a tight loop. Use quick mode for iteration.
Do not fix issues during verification. This is read-only assessment. Report and exit.
Verification-loop is manual/command-driven (/verify). Hooks are automatic/event-driven (PostToolUse).
Hooks catch issues immediately during editing. Verification-loop catches issues comprehensively before PR.
Both are needed. Hooks prevent introduction. Verification confirms absence.