Install
$ agentstack add skill-45ck-skill-harness-noslop-commit-gate ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Use this skill before every git commit in a noslop-protected repository.
Gate command:
noslop check --tier=fast
Run this before staging the final commit. The pre-commit hook runs it automatically, but running it manually first surfaces failures early.
If the gate fails:
- read the failure output and fix the reported issue (lint error, format violation, spell error)
- never use
git commit --no-verify— the Claude Code guardrails block this for AI agents and it defeats the purpose of the gate - never disable lint rules to make the gate pass; fix the underlying issue
- after fixing, re-run
noslop check --tier=fastto confirm the gate is green before committing
Content-aware config protection — Tier 1:
The pre-commit hook checks quality gate config files for weakening patterns. Strengthening changes pass through automatically.
| Config | Blocked (weakening) | Allowed (strengthening) | |---|---|---| | eslint.config.mjs | Adding 'off' rules, eslint-disable, net removal of 'error' rules | New rules, tighter limits | | vitest.config.ts | Lowering coverage thresholds, removing thresholds | Raising thresholds | | tsconfig*.json | Adding strict: false, net removal of strict flags | New strict flags | | .dependency-cruiser.cjs | Net removal of name: rules, severity downgrade to warn/info/off | New forbidden rules | | knip.json | Expanding ignore/ignoreDependencies, ignoreExportsUsedInFile | New entry points |
Enforcement file protection — Tier 2a:
Files in .githooks/, .claude/hooks/, and AGENTS.md are the enforcement mechanism itself. The hook only blocks:
- removal of quality commands (
npm run ci,npm run test,noslop check, etc.) - net removal of
exit 1lines - net removal of
set -elines
Additive changes (new jobs, new checks, new schedules) pass through.
CI and config file protection — Tier 2b:
Files in .github/workflows/ and .claude/settings.json are fully checked:
- removal of quality commands
- addition of bypass patterns (
continue-on-error: true,--no-verify,[skip ci],SKIP_CI,skip-checks) - net removal of
exit 1
Lines containing deny, block, or "Bash are excluded from bypass detection to avoid false positives on enforcement logic.
Avoid:
- using
--no-verifyunder any circumstance - adding
eslint-disablecomments to silence lint failures - downgrading config severity to pass the gate
- editing
.githooks/,.claude/, or.github/workflows/to remove gate commands
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: 45ck
- Source: 45ck/skill-harness
- License: MIT
- Homepage: https://github.com/45ck/skill-harness/releases/tag/v0.1.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.