Skip to content
Back to skills

Quick Gate Js

ASecurity

Run the optional KWIK-E-GATE JS/TS adapter or interpret its gate-result/v1 diagnostics. Use for JavaScript/TypeScript tool checks; the core owns completion receipts.

  • 5 stars
  • 0 votes
  • 0 copies
  • 4 views
  • Added September 19, 2026
developmentjavascripttypescriptjavanodegit

Works with

  • cli

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 13 files and shows the line behind each finding

Scanned September 29, 2026

npx -y skills add hermes-labs-ai/quick-gate-js --skill quick-gate-js --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Quick Gate Js?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Quick Gate Js
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/hermes-labs-ai-quick-gate-js-quick-gate-js/badge)](https://www.skillsdirectory.com/skills/hermes-labs-ai-quick-gate-js-quick-gate-js)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: quick-gate-js
description: Run the optional KWIK-E-GATE JS/TS adapter or interpret its gate-result/v1 diagnostics. Use for JavaScript/TypeScript tool checks; the core owns completion receipts.
---

Quick Gate is the optional JS adapter for KWIK-E-GATE. The core owns content-bound
completion receipts; this package also supports standalone Node users.

Quick Gate runs the checks a JavaScript/TypeScript project already defines
as one gate and emits a validated `gate-result/v1` result
(https://github.com/hermes-labs-ai/quick-gate-js). It coordinates ESLint,
`tsc`, the build, and Lighthouse; it does not replace them or prove the code
correct.

## Run it

1. This skill describes the unreleased 0.4.0 source candidate. Use an explicitly
   installed `quick-gate` or the checkout's `node /path/to/src/cli.js`; verify its
   version. After publication the exact install pin is `quick-gate@0.4.0`.
   Do not download packages implicitly. Published 0.3.2 remains compatible for
   evaluation; use `--deterministic-only` for its repair behavior.
2. Make sure the project's own dependencies are installed. Quick Gate calls
   fallbacks with `npx --no-install` and never installs `tsc` or `lhci` for you.
3. From the project root, write the changed files (newline-delimited or a
   JSON array) and run with an explicit mode and an external output directory:
   ```
   printf 'src/app.ts\n' > "$TMPDIR/qg-changed.txt"
   npx --no-install quick-gate run --mode quick \
     --changed-files "$TMPDIR/qg-changed.txt" \
     --output-dir "$(mktemp -d)"
   ```
   `--mode` and `--changed-files` are required. `quick` runs lint, typecheck,
   and Lighthouse; `full` also runs build. Checks use the project's
   `lint`, `typecheck`, `build`, and `lighthouse`/`ci:lighthouse` npm
   scripts, then `commands` in `quick-gate.config.json`, then fallbacks
   (`npx --no-install tsc --noEmit`; `npx --no-install lhci autorun`, which
   needs `--output-dir`).
4. Stdout is JSON: `{ status, gateResult, artifacts, runId }`. The output
   directory holds `failures.json`, `run-metadata.json` (command traces with
   the underlying tool output), and `gate-result.json`.

## Read the verdict exactly

- Exit code `0` only when the gate passes; `1` otherwise, including usage
  errors.
- Top-level `status` is `pass` or `fail`. It is `fail` whenever
  `gateResult.status` is anything other than `pass`.
- `gateResult.schema` is `gate-result/v1`. `gateResult.status` is one of:
  - `pass`: every enabled check ran and passed with no findings.
  - `fail`: checks ran and at least one produced a finding.
  - `timeout`: a check timed out.
  - `error`: a check could not run (`missing` command, start error, or
    Lighthouse fallback without an output directory), or the checked files
    changed during the run.
  Precedence: changed input, then `timeout`, then `missing`/`error`, then
  findings, then `pass`.
- Per-check `status` is `pass`, `fail`, `timeout`, `missing`, `error`, or
  `skipped` (`build` in `quick` mode).
- Release 0.4.0 has no `unknown` result status. Report `timeout` and `error` as
  "not verified". They are not a pass and not proof of a code defect.

## Release 0.4.0 limits

- Lighthouse is enabled in both modes by default. Disable an inapplicable
  check only with an explicit boolean under `gates` in
  `quick-gate.config.json`; disabled checks are recorded as `skipped`.
  Disclose skipped checks instead of presenting them as verified.
- Repair is separate from evaluation and defaults to deterministic in 0.4.0.
  `--model-assisted` explicitly opts into local Ollama. Run `quick-gate repair` only when in scope. It can modify project
  files. After a repair, review `git diff` and the report.
- Artifacts can contain command output and paths. Do not upload them
  anywhere the user has not approved.

## Fixtures

`fixtures/clean` and `fixtures/broken` in this skill directory are two tiny
TypeScript packages. They are the same except for one type error in
`broken/greeting.ts`. Each declares a no-op Lighthouse command because it is
not a web app. To check that the skill works, copy one fixture to a temp
directory and run:
```
npm install --ignore-scripts --no-audit --no-fund --no-package-lock
npx --no-install quick-gate run --mode quick --changed-files changed-files.txt --output-dir "$(mktemp -d)"
```
The bundled fixtures are expected to produce these results with quick-gate 0.4.0:

- `clean` exits `0`: `status: pass`. Checks are lint `pass`, typecheck
  `pass`, build `skipped`, lighthouse `pass`, with 0 findings.
- `broken` exits `1`: `status: fail`. Typecheck is `fail` (exit 2) with
  finding `typecheck_failure`, and the tsc error is in
  `run-metadata.json` traces.

Files in this skill

  • SKILL.md4.4 KB
  • fixtures/broken/changed-files.txt12 B
  • fixtures/broken/eslint.config.js71 B
  • fixtures/broken/greeting.ts131 B
  • fixtures/broken/package.json230 B
  • fixtures/broken/quick-gate.config.json133 B
  • fixtures/broken/tsconfig.json183 B
  • fixtures/clean/changed-files.txt12 B
  • fixtures/clean/eslint.config.js71 B
  • fixtures/clean/greeting.ts154 B
  • fixtures/clean/package.json229 B
  • fixtures/clean/quick-gate.config.json133 B
  • fixtures/clean/tsconfig.json183 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.