Skip to content
Back to skills

Docs

ASecurity

Claude Code can run a skill named `verify` right before it commits. This page gives a ready `SKILL.md` that makes that step a `evidence-referee done` check on your test output. The plugin does not write the file into your project; you copy it yourself.

  • 3 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 2, 2026
ai-agentsgitapi

Works with

  • claude code
  • api

Security analysis

A96/100
  • mediumUses curl or wget to download content

Pro scans all 21 files and shows the line behind each finding

Scanned October 2, 2026

npx -y skills add ismaildasci/evidence-referee --skill docs --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Docs?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Docs
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/ismaildasci-docs/badge)](https://www.skillsdirectory.com/skills/ismaildasci-docs)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# A recipe for the project `verify` skill

Claude Code can run a skill named `verify` right before it commits. This page gives a ready `SKILL.md` that makes that step a `evidence-referee done` check on your test output. The plugin does not write the file into your project; you copy it yourself.

## Install

```sh
mkdir -p .claude/skills/verify
curl -fsSL https://raw.githubusercontent.com/ismaildasci/evidence-referee/main/docs/recipes/verify/SKILL.md -o .claude/skills/verify/SKILL.md
```

Or copy [docs/recipes/verify/SKILL.md](recipes/verify/SKILL.md) by hand, into `.claude/skills/verify/` in a project or `~/.claude/skills/verify/` for all projects. Then change the test command in step 1 to your own. The recipe needs `evidence-referee` available through `npx` and a TypeSafe key (see [configuration](configuration.md#the-api-key)).

> [!WARNING]
> **Not on npm yet.** Until the package is published (early October 2026), `npx evidence-referee` fails with a 404, and the recipe as written produces no verdict. Use the alias from the [README install note](../README.md#install) and replace `npx evidence-referee` with `evidence-referee` in your copy. The recipe tells Claude to report a missing verdict instead of committing or looping.

## What Claude Code does with it

Verified against official sources on 2026-10-01:

- The changelog entry for 2.1.286 reads: "Improved commit guidance: when your project or user skills include one named `verify`, Claude is now told to run it right before committing, except for docs-only and tests-only commits" ([changelog](https://code.claude.com/docs/en/changelog)). The page is fetched live and was not pinned to an archived copy.
- The skills page says a recorded project skill at `.claude/skills/verify/SKILL.md` replaces the bundled `/verify` (needs 2.1.200 or later) and lists the frontmatter fields used here: `name`, `description`, `allowed-tools` ([skills](https://code.claude.com/docs/en/skills)). It does not itself mention the pre-commit run; only the changelog does.

"Told to run it" is guidance in Claude's prompt, not a hook. Claude can still skip it, so it is not a gate. For a gate that blocks a stop, see the done-gate (`hooks.stopGate`) in the [README](../README.md).

## Limits

- A project skill named `verify` replaces the bundled `/verify`, which builds and runs your app. If you rely on that, keep the app-run step in your copy of the recipe or give this one another name and call it yourself.
- Docs-only and tests-only commits skip the step by design.
- Each check is one Jev request; repeats of the same evidence come from the local cache. See [economics](economics.md).
- Output from a runner the referee does not recognise is sent as text and can never count as `met` (see `done --describe`). The recipe appends an `exit code:` line so a passing run of such a runner still counts, and a failing one is `missing`.
- Privacy: the redacted test output leaves your machine on every check (sent to the TypeSafe API, which runs in the US). Input that looks like a password, key or token is not sent. Read [privacy](privacy.md) before enabling a skill that fires before each commit.

Files in this skill

  • configuration.md13.3 KB
  • decisions/claims-tr.md2.5 KB
  • decisions/decide-order.md26.5 KB
  • decisions/done-v2-holdout2.md4.6 KB
  • decisions/done-v2-holdout3.md5.2 KB
  • decisions/done-v2-holdout4.md4 KB
  • decisions/done-v2-holdout5.md5.8 KB
  • decisions/done-v2-holdout6.md14.9 KB
  • decisions/dropped.md1.8 KB
  • decisions/exit-code-only-lint-wide.md2.9 KB
  • decisions/exit-code-only-met.md3.1 KB
  • decisions/runner-parsers-met-recall.md7.5 KB
  • decisions/session-base-rate.md10.9 KB
  • decisions/stop-negation.md8.3 KB
  • economics.md8.7 KB
  • faq.md5.8 KB
  • measurements.md49.3 KB
  • privacy.md5.8 KB
  • recipes/verify/SKILL.md1.4 KB
  • verify-skill.md3.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.