Skip to content
Agentmart
Submit a tool

check-push-readiness

Audits, read-only, the exact unpushed commits before a push: resolves the live remote SHA, checks fast-forward, scans the diff for secrets and debug code…

Skill by twistingmercury

IndexedMIT
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/twistingmercury-check-push-readiness

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Audits, read-only, the exact unpushed commits before a push: resolves the live remote SHA, checks fast-forward, scans the diff for secrets and debug code, reviews commit metadata, and validates the committed tree. Use when asked whether a commit or branch is ready to push, or before the push-and-create-PR option in superpowers:finishing-a-development-branch.

Use cases: security

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/check-push-readiness

What's inside

Skill name
check-push-readiness
Description
Audits, read-only, the exact unpushed commits before a push: resolves the live remote SHA, checks fast-forward, scans the diff for secrets and debug code, reviews commit metadata, and validates the committed tree. Use when asked whether a commit or branch is ready to push, or before the push-and-create-PR option in superpowers:finishing-a-development-branch.
License
MIT
Instructions
87 lines in SKILL.md · view on GitHub

Files (1)

  • SKILL.md

SKILL.md (first lines)

# Check Push Readiness

This skill complements `superpowers:finishing-a-development-branch`. That
skill verifies the test suite and chooses how to integrate the branch; this one
audits what the push would transfer, read-only, before that push option is
taken. It never merges, pushes, or cleans up.

## Apply Guardrails

- Operate read-only.
- Do not edit, stage, commit, fetch into the repository, push, or fix findings without explicit approval.
- Do not create tracked readiness or review documents.
- Re-read repository and remote state before the final verdict if concurrent edits are possible.

## Establish Push Scope

- Read applicable `AGENTS.md`, contribution guidance, development documentation, and repository-defined validation commands.
- Identify the current branch, configured upstream, push remote, and remote branch.
- Resolve the live remote branch SHA with a read-only query such as `git ls-remote`; do not rely solely on possibly stale remote-tracking refs.
- Identify the exact commits that the configured push would transfer.
- Report `NO-GO` when the destination or commit range is ambiguous.
- Report `NOTHING TO PUSH` when local `HEAD` matches the live remote ref and no commits would transfer.

If the live remote SHA is unavailable locally, use a read-only hosting API or a disposable temporary clone to compare history. Do not update local refs merely to perform the check.

## Inspect Repository State

Inspect:

- Branch, `HEAD`, upstream, push configuration, and remote URLs.
- Ahead/behind state against the live remote ref.
- Staged, unstaged, untracked, and relevant ignored files.
- Unmerged paths, submodule changes, and Git LFS state when applicable.

Distinguish committed content from dirty worktree content. Dirty files are not part of the push, but flag them when they indicate that a commit may be incomplete, generated outputs are stale, tests may inspect unintended content, or the user may believe those files are included.

Verify that the live remote commit is an ancestor of local `HEAD`. Report `NO-GO` for divergence, a non-fast-forward push, rewritten published history, or any case requiring force.

## Review the Exact Commits

Inspect every unpushed commit and the full aggregate diff against the live remote commit.

Check commit metadata for:

- Clear and policy-compliant subjects and bodies.
- Correct authorship and signing when required.
- Accidental fixup, squash, revert, or merge commits.
- Issue references, attribution, and trailers required by repository policy.

Check the full diff for:

- Secrets, credentials, private keys, tokens, or sensitive data.
- Conflict markers, debug code, temporary instrumentation, or disabled checks.
- Accidental binaries, archives, large files, generated artifacts, or local configuration.
- Unrelated changes, incomplete refactors, stale generated files, and missing migrations.
- Correctness defects, security risks, compatibility breaks, and inadequate tests.
- Unexpected file modes, renames, deletions, submodule pointers, or dependency changes.

Avoid reproducing discovered secrets in output. Identify only the affected file and remediation category.

## Validate the Committed Tree

- Run repository-prescribed formatting, linting, static analysis, tests, builds, and documentation checks proportional to the pushed diff.
- Prefer validation of exact `HEAD`, not a dirty working tree.
- Use a disposable temporary clone when dirty files could affect results and exact committed-tree validation is material.
- Record the commands, results, skipped checks, and environmental limitations.
- Treat required failed or unverified checks as `NO-GO`.
- Use focused correctness review or a relevant language specialist when changed files require expertise beyond the prescribed checks.

## Report Readiness

Report findings first, ordered by severity. For each finding, state:

- The concrete problem.
- The affected commit or file.
- Evidence sufficient to verify it.
- Why it blocks or weakens push readiness.

Then issue exactly one verdict:

- `GO`: The exact unpushed commits are reviewed, validation is sufficient, and the push is fast-forward.
- `NO-GO`: A blocker, divergence, ambiguous destination, incomplete commit signal, or required unverified check remains.
- `NOTHING TO PUSH`: The configured live remote branch already points to local `HEAD`.

Conclude with the exact remote destination, live remote SHA, local `HEAD`, unpushed commit range, validation performed, and any checks not completed. Do not push or fix findings without explicit approval.

From twistingmercury/agents-skills, MIT.

More from twistingmercury/agents-skills

Signals

Stars
0
Forks
0
Open issues
0
Last commit (this folder)
Oct 5, 2026 (24 days ago)

From GitHub (fetched Oct 24, 2026).

Details

License
MIT
First seen
Oct 24, 2026
Last checked
Oct 24, 2026

More from twistingmercury

Cite this page

check-push-readiness skill. Agent Mart. https://agentmart.dev/skills/twistingmercury-check-push-readiness (last updated 2026-10-24)