Metagit Release Audit

Mandatory before calling work complete when the session changed repo files. Runs format, lint, tests, integration tests, context-aware pip-audit/bandit, and optional gitleaks via task qa:prepush. Use before push, release, or hand-off.

metagit-ai Updated

File contents

Auditing Release Readiness

Use this skill whenever your session added or edited tracked files in this repository and you are about to hand off or say the task is done—not only “release” workflows. Read-only Q&A with no writes can skip it.

Workflow

  1. Run the pre-push quality gate.
  2. Capture failing stage logs and iterate fixes.
  3. Re-run until all required checks pass.
  4. Return a short readiness summary.

Commands

  • task qa:prepush
  • task qa:prepush:loop -- 3 (optional bounded retry loop)

Output Contract

Return:

  • pass/fail status by stage (including security_sync / security_audit / security_bandit when triggered)
  • unresolved blockers (if any)
  • push readiness recommendation

Security in the gate is context-aware: lockfile changes run uv sync --frozen --all-extras + pip-audit + bandit; src/ changes run pip-audit + bandit; docs-only diffs skip security. Use task security:scan for a full manual run.

Safety

  • Do not claim readiness unless checks are actually green.

metagit-ai/metagit-cli/tree/main/skills/metagit-release-audit commit 6f6183437b

Frequently asked questions

npx skillmds@latest add metagit-ai/metagit-release-audit