Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

trace-mcp Pre-Commit & Pre-PR Checks

Makes the agent run trace-mcp's security, quality-gate, and antipattern checks before every commit or pull request.

Security & ReviewIntermediate★ 140⑂ 19AI score 9/10Last updated: Sep 5, 2026

What it does

Whenever you ask to stage, commit, push, or open a PR, the agent runs the trace-mcp validation suite first instead of committing blindly.

  • scan_security({ rules: ["all"] }) for an OWASP Top-10 scan, plus taint_analysis to trace untrusted sources into SQL, shell, filesystem, and HTTP sinks
  • check_quality_gates({ scope: "changed" }) for complexity, coverage, and duplication gates on changed files only
  • detect_antipatterns for N+1 queries, eager loading, and inefficient iteration
  • compare_branches for a symbol-level diff (functions added/removed, signature and export changes) as the basis of an accurate PR description
  • predict_bugs and get_risk_hotspots for risky changes in high-churn, high-complexity files

It also sets triage rules: fix Critical/High before committing, fix Medium if cheap, document Low/Info in the PR.

Who it's for

  • Developers who let Claude Code write code and then commit or open PRs immediately
  • Teams that want security and quality issues caught before human review
  • Anyone who wants PR descriptions and changelogs grounded in real code changes rather than commit messages

Examples

  1. "Commit these changes" → the agent runs a security scan and changed-scope quality gates, fixes High findings, then commits.
  2. "Open a PR" → compare_branches produces a symbol-level change list used to write the PR body.
  3. Touching a payment or auth module → get_risk_hotspots flags it as a hotspot, so extra tests are added.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/nikolai-vysotskyi/trace-mcp/HEAD/skills/trace-mcp-pre-commit/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the skills/trace-mcp-pre-commit folder from the GitHub repo nikolai-vysotskyi/trace-mcp into my ~/.claude/skills/trace-mcp-pre-commit/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/nikolai-vysotskyi/trace-mcp.git /tmp/trace-mcp && mkdir -p ~/.claude/skills && cp -r /tmp/trace-mcp/skills/trace-mcp-pre-commit ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Install the trace-mcp MCP server and index your project first (see the repo README). The skill does nothing without it.
  2. Clone the repository: git clone https://github.com/nikolai-vysotskyi/trace-mcp.git /tmp/trace-mcp
  3. Create the skills directory: mkdir -p ~/.claude/skills
  4. Copy the skill: cp -r /tmp/trace-mcp/skills/trace-mcp-pre-commit ~/.claude/skills/
  5. Restart Claude Code and ask it to "commit my changes" to confirm the check suite runs automatically.
  6. If it doesn't trigger, run /mcp to verify the trace-mcp connection and that the project is indexed.
View source on GitHub ↗License: MIT