Security & Compliancelow risk
metagit-release-audit
Mandatory before calling work complete when the session changed repo files. Runs format, lint, tests, integration tests, context-aware pip-audit/bandit, and optional gitleaks via task qa:prepush. Use before push, release, or hand-off.
metagit-ai/metagit-cli·src/metagit/data/skills/metagit-release-audit/SKILL.md
85/ 100品質分
匯入這個 Skill
選擇你的 coding agent，複製專案級或個人級安裝指令。
匯入目前專案.agents/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a codex -y匯入個人環境~/.agents/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a codex -g -y匯入目前專案.claude/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a claude-code -y匯入個人環境~/.claude/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a claude-code -g -y匯入目前專案.agents/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a github-copilot -y匯入個人環境~/.copilot/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a github-copilot -g -y匯入目前專案.agents/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a cursor -y匯入個人環境~/.cursor/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a cursor -g -y匯入目前專案.agents/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a gemini-cli -y匯入個人環境~/.gemini/skills/metagit-release-audit
npx skills add https://github.com/metagit-ai/metagit-cli/tree/482dfb3b7a407ca5e541657a6fcc9af619818243/src/metagit/data/skills/metagit-release-audit -a gemini-cli -g -yNative Gemini CLI
gemini skills install https://github.com/metagit-ai/metagit-cli.git --scope workspace --path src/metagit/data/skills/metagit-release-audit⚠ 安裝指令使用開源 skills CLI。執行前請檢查來源、腳本與權限。
Skill 指令
在 GitHub 查看原始檔案 ↗# Auditing Release Readiness Use this skill **whenever** your session added or edited tracked files in this repository and you are about to hand off or say the task is done—not only “release” workflows. Read-only Q&A with no writes can skip it. ## Workflow 1. Run the pre-push quality gate. 2. Capture failing stage logs and iterate fixes. 3. Re-run until all required checks pass. 4. Return a short readiness summary. ## Commands - `task qa:prepush` - `task qa:prepush:loop -- 3` (optional bounded retry loop) ## Output Contract Return: - pass/fail status by stage (including `security_sync` / `security_audit` / `security_bandit` when triggered) - unresolved blockers (if any) - push readiness recommendation Security in the gate is context-aware: lockfile changes run `uv sync --frozen --all-extras` + `pip-audit` + `bandit`; `src/` changes run `pip-audit` + `bandit`; docs-only diffs skip security. Use `task security:scan` for a full manual run. ## Safety - Do not claim readiness unless checks are actually green.