Pre-Commit Guard
Last line of defense against the TOOLS.md class of issues.
When to use
- Auto-run as
.git/hooks/pre-commit(preferred) - Manual invocation:
bash skills/pre-commit-guard/scripts/check_repo.sh
Checks
- Credential scan — block if any tracked file matches:
eyJ[A-Za-z0-9_\-]{20,}\.eyJ(JWT)gh[ps]_[A-Za-z0-9]{36}(GitHub PAT)xox[bp]-[0-9-]+-[A-Za-z0-9]+(Slack)
- File size — warn on files >100KB tracked under doctrine paths (
*.mdat repo root) - SKILL.md validation — for each
skills/*/SKILL.md, require frontmatter withname:anddescription:fields
Failure mode
Print failures, exit 1, block commit.