trace-mcp-pre-commit
SolidRun trace-mcp security, quality-gate, and antipattern checks before committing or opening a PR. Activate when the agent is about to create a commit or pull request in a project indexed by trace-mcp.
AI & Automation 94 stars
15 forks Updated today MIT
Install
Quality Score: 86/100
Stars 20%
Recency 20%
Frontmatter 20%
Documentation 15%
Issue Health 10%
License 10%
Description 5%
Skill Content
# trace-mcp — Pre-Commit & Pre-PR Checks
Before creating a commit or opening a pull request, run the trace-mcp validation suite. Fix any critical or high findings before committing.
## When to Use
- The user asks to commit, stage, or push changes
- The user asks to open a PR
- The agent has finished implementing a feature or fix and is about to hand off
## Checklist
### 1. Security scan
```
scan_security({ rules: ["all"] })
```
OWASP Top-10 vulnerability scan across the changed scope. If the change touches untrusted data flows, add:
```
taint_analysis({})
```
Trace untrusted sources to sensitive sinks (SQL, shell, file system, HTTP).
### 2. Quality gates on the changed scope
```
check_quality_gates({ scope: "changed" })
```
Validates complexity, coverage, duplication, and any project-configured gates on only the files you changed.
### 3. Antipattern scan
```
detect_antipatterns({})
```
Flags N+1 queries, eager loading, inefficient iteration, and language-specific performance footguns.
### 4. Symbol-level diff for the PR description
```
compare_branches({ branch: "current" })
```
Produces a symbol-level diff (functions added/removed/modified, signatures changed, exports changed). Use this as the basis for an accurate PR description instead of a raw line diff.
### 5. Bug prediction (optional, for risky changes)
```
predict_bugs({})
get_risk_hotspots({})
```
Flags files where the combination of high complexity and high churn makes regressions likely. If your...
Details
- Author
- nikolai-vysotskyi
- Repository
- nikolai-vysotskyi/trace-mcp
- Created
- 3 months ago
- Last Updated
- today
- Language
- TypeScript
- License
- MIT
Integrates with
Bundled in these plugins
Similar Skills
Semantically similar based on skill content — not just same category
AI & Automation Solid
trace-mcp
Use trace-mcp tools for code navigation, impact analysis, and framework-aware queries instead of Read/Grep/Glob/Bash. Activate whenever the agent needs to explore, understand, or modify a codebase that has trace-mcp indexed.
94 Updated today
nikolai-vysotskyi AI & Automation Solid
trace-mcp-refactoring
Safe refactoring workflow using trace-mcp — assess risk, find candidates, check impact, and rename symbols across all files without missing import sites or cross-file references.
94 Updated today
nikolai-vysotskyi Code & Development Listed
requesting-code-review
Pre-commit review: security scan, quality gates, auto-fix.
3 Updated today
Jessinra