Skip to content
Back to skills

Market Pre Push Checks

ASecurity

Use before pushing, merging, or claiming a green tree in dsh-agent-plugins-market, to select the smallest checks that cover the outgoing diff instead of reflexively running the full suite.

  • 12 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 19, 2026
ai-agentsgogit

Works with

  • cli
  • mcp

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned September 19, 2026

npx -y skills add Sivan757/dsh-agent-plugins-market --skill market-pre-push-checks --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Market Pre Push Checks?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Market Pre Push Checks
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/sivan757-market-pre-push-checks/badge)](https://www.skillsdirectory.com/skills/sivan757-market-pre-push-checks)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: market-pre-push-checks
description: Use before pushing, merging, or claiming a green tree in dsh-agent-plugins-market, to select the smallest checks that cover the outgoing diff instead of reflexively running the full suite.
---

# Market Pre-Push Checks

Run evidence matched to the outgoing diff once, then report only the commands run. CI owns exhaustive coverage; the full `pnpm run test` locally is reserved for release verification (see [market-release](../market-release/SKILL.md)) and repository-wide changes.

## Steps

1. **Scope the diff.** `git status --short --branch` and `git diff <base> --stat`; the surface list is the completion criterion for this step.
2. **Map surface to evidence** and run the union once:

| Outgoing surface                     | Evidence                                                                                       |
| ------------------------------------ | ---------------------------------------------------------------------------------------------- |
| `src/**` or `tests/**`               | `check:refactor` + the vitest files mirroring the touched areas (`tests/<area>.test.ts`)       |
| `src/client/**` or `locales.ts`      | above + every `tests/client-*.test.ts`                                                         |
| `schemas/**`                         | above + `tests/mcp-config.test.ts` + `tests/lsp-spec.test.ts`                                  |
| `docs/**`, `README*`, `docs-site/**` | `format:check` (and `docs-site` build when its sources changed)                                |
| `package.json` / lockfile            | `pnpm install --frozen-lockfile` + `check:refactor` + `check:host-alignment`                   |
| a new `import('@deepseek-ai/dsh-*')` | above + `check:host-alignment` (an undeclared host import is a surface that degrades silently) |

3. **Re-verify after fixes.** Any fix reruns the same command set that failed, nothing more.
4. **Green tree.** `format:check` covers files eslint does not (docs, HTML, fixtures) — include it whenever non-TS files moved, then report the evidence list with the push proposal.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.