메뉴
Comprehensive pre-commit verification for security, best practices, code standards, and performance. Checks for vulnerabilities, efficiency issues, N+1 queries, and convention adherence.
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/cbemister/claude-code-utils --skill verify-work명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | verify-work |
| description | Comprehensive pre-commit verification for security, best practices, code standards, and performance. Checks for vulnerabilities, efficiency issues, N+1 queries, and convention adherence. |
Comprehensive pre-commit verification of code changes for security vulnerabilities, best practices violations, efficiency issues, and code standards adherence. Works with any project.
/ship (mandatory)/verify-work to check changes before committingCRITICAL — NON-INTERACTIVE: Run every phase to completion without pausing. Never ask questions, request confirmation, offer choices, or wait for input at any point. Auto-fix what you can silently. Report everything at the end. Do not stop early even if blocking issues are found.
Goal: Get comprehensive view of all changes
# Get changed file list
git status --short
# Get diff statistics
git diff --stat HEAD
# Get detailed diff
git diff HEAD
# Get file paths only
git diff --name-only HEAD
git diff HEAD | grep -iE | grep -v
git diff HEAD | grep -E
git diff --name-only HEAD | grep -E
Flag if found:
.env or .env.local files# Check for template literal variables in SQL queries
git diff HEAD -- '**/*.ts' '**/*.tsx' | grep -E "\`.*\$\{.*\}.*\`" | grep -iE "select|insert|update|delete|where"
# Check for string concatenation in queries
git diff HEAD -- '**/*.ts' '**/*.tsx' | grep -E "query\(.*\+|sql\(.*\+"
Flag if found:
# Check for dangerouslySetInnerHTML
git diff HEAD -- '**/*.tsx' | grep -E "dangerouslySetInnerHTML|innerHTML"
Flag if found:
dangerouslySetInnerHTML without explicit justification# Check for request.json() without validation
git diff HEAD -- '**/*.ts' | grep "request\.json()" -A 3 | grep -v "safeParse\|parse\|schema\|validate"
Flag if found:
# Find console statements in changed files
git diff HEAD | grep -nE "^[+].*console\.(log|warn|error|info|debug)" | grep -v "// console"
# Find TODO/FIXME comments
git diff HEAD | grep -niE "^[+].*(//)?\s*(todo|fixme|xxx|hack)"
# Find commented-out code blocks (3+ consecutive lines)
git diff HEAD | grep -E "^[+]\s*//\s*[a-zA-Z]" -A 2 | grep -E "^[+]\s*//"
Flag if found:
console.log statements (except in error boundaries/handlers)Auto-fix: Remove console.log/warn/info/debug statements automatically. Keep console.error in catch blocks.
# Find 'any' types
git diff HEAD -- '*.ts' '*.tsx' | grep -nE ":\s*any[^a-zA-Z]" | grep -v "// "
# Find @ts-ignore or @ts-nocheck
git diff HEAD | grep -nE "@ts-(ignore|nocheck|expect-error)"
Flag if found:
: any type annotations@ts-ignore without explanation comment# Check for empty catch blocks
git diff HEAD -- '**/*.ts' '**/*.tsx' | grep -E "catch.*\{" -A 5 | grep -E "^[+]\s*\}"
Flag if found:
# Check for useEffect without dependency array
git diff HEAD -- '**/*.tsx' | grep "useEffect" -A 2 | grep -E "^\+.*\}\)" | grep -v ", \["
Flag if found:
useEffect without dependency array (infinite loop risk)# Check for potentially unused imports
git diff HEAD | grep "^+import" | cut -d' ' -f2 | cut -d',' -f1 | while read import; do
git diff HEAD | grep -v "^+import" | grep -q "$import" || echo "Potentially unused: $import"
done
Flag if found:
# Find large files (500+ lines) in changed files
git diff --name-only HEAD | while read file; do
if [ -f "$file" ]; then
lines=$(wc -l < "$file" 2>/dev/null || echo 0)
if [ "$lines" -gt 500 ]; then
echo "LARGE FILE ($lines lines): $file"
fi
fi
done
# Find large React components (300+ lines)
git diff --name-only HEAD | grep -E "\.tsx$" | while read file; do
if [ -f "$file" ]; then
lines=$(wc -l < "$file" 2>/dev/null || echo 0)
if [ "$lines" -gt 300 ]; then
echo "LARGE COMPONENT ($lines lines): $file"
fi
fi
done
Flag if found:
Only run if changed files include database queries or API routes.
# Queries inside loops
git diff HEAD -- '**/*.ts' | grep -nE "for\s*\(|while\s*\(|\.forEach\(|\.map\(" -A 10 | grep -E "await.*query"
# Async array methods with database calls
git diff HEAD -- '**/*.ts' | grep -nE "\.map\(async|\.forEach\(async" -A 5 | grep -E "query"
Flag if found:
# SELECT without LIMIT or ID filter
git diff HEAD -- '**/*.ts' | grep -nE "SELECT.*FROM" | grep -v "LIMIT|WHERE.*id\s*=|RETURNING|COUNT\(|EXISTS\(|MAX\(|MIN\("
Flag if found:
# Leading wildcard LIKE (full table scan)
git diff HEAD -- '*.ts' '*.tsx' | grep -nE "LIKE\s*['\"]%|LIKE\s*\\\$"
# Functions on indexed columns (prevents index use)
git diff HEAD -- '*.ts' '*.tsx' | grep -nE "WHERE\s*(LOWER|UPPER|TRIM|DATE)\("
Flag if found:
LIKE '%term%' — cannot use B-tree index# Multiple writes without transaction
git diff HEAD -- '*.ts' '*.tsx' | grep -E "INSERT|UPDATE|DELETE" | grep -v "BEGIN|COMMIT|ROLLBACK|transaction|\$transaction"
Flag if found:
# Data fetching hooks inside loops (client-side N+1)
git diff HEAD -- '*.tsx' | grep -nE "\.map\(.*useSWR|\.map\(.*useQuery|\.map\(.*fetch"
Flag if found:
useSWR, useQuery) inside .map() or loops# Back-to-back independent awaits
git diff HEAD -- '*.ts' '*.tsx' | grep -nE "const.*=\s*await" -A 1 | grep -E "const.*=\s*await"
Flag if found:
Promise.all([])# Check component files are PascalCase
git diff --name-only HEAD | grep -E "src/components/.*\.tsx$" | grep -v "^[A-Z]" | grep -v "/[A-Z]"
Flag if found:
Check that the project's styling approach is followed consistently. If the project uses CSS Modules, check for inline styles. If it uses a utility framework, check for raw CSS where utilities should be used.
# Check for inline styles when CSS Modules are used
git diff HEAD -- '**/*.tsx' | grep -E "style=\{\{"
Flag if found:
This phase is fully automatic — no user prompts.
Apply fixes silently for:
console.log, console.warn, console.info, console.debug statements (keep console.error in catch blocks)Present a clean summary of all findings:
## Verification Results
### Blocking Issues — N found
- [type] Description — file:line
- [type] Description — file:line
### Warnings — N found
- [type] Description — file:line
### Optimization Suggestions — N found
- [type] Description — file:line
---
**Auto-fixed:** N issues resolved automatically
**Remaining:** N blocking issues need manual attention before committing
If there are BLOCKING issues that couldn't be auto-fixed, list them clearly with what needs to change. Do NOT prompt for input — just report.
If all blocking issues are resolved (either auto-fixed or none found), report success and indicate readiness to proceed.
| Category | Check | Severity |
|---|---|---|
| Security | ||
| Secrets | Hardcoded credentials | BLOCKING |
| SQL Injection | String interpolation in queries | BLOCKING |
| XSS | dangerouslySetInnerHTML | BLOCKING |
| Validation | request.json() without validation | BLOCKING |
| Best Practices | ||
| Debug Code | console.log statements | BLOCKING (auto-fix) |
| TypeScript | : any types, @ts-ignore | BLOCKING |
| Error Handling | Empty catch blocks | BLOCKING |
| Efficiency | ||
| React Hooks | useEffect without deps | WARNING |
| Imports | Unused imports | WARNING (auto-fix) |
| File Size | 500+ line files, 300+ line components | REFACTOR |
| Database | ||
| N+1 Queries | Queries inside loops | BLOCKING |
| Unbounded SELECT | No LIMIT or ID filter | BLOCKING |
| Standards | ||
| File Naming | Non-PascalCase components | WARNING |
| Styling | Inline styles vs project convention | WARNING |
/ship (mandatory)