How does the security scanning phase work?

It performs automated pattern matching to detect hardcoded secrets (like 'sk-' keys), sensitive API identifiers, and accidental production console logs.

When is the best time to trigger the Verification Loop?

It is best used immediately after completing a feature, following a major refactor, or as the very last step before you submit a Pull Request.

Can I use this with existing CI/CD hooks?

Yes, this skill is designed to complement tools like PostToolUse hooks, providing a much deeper, manual-trigger validation than standard automation.

What programming languages are supported by this skill?

The skill includes pre-configured commands for TypeScript, JavaScript, and Python, including support for tools like npm, pnpm, tsc, pyright, and ruff.

Verification Loop

Name: Verification Loop
Author: xu-xiang

byxu-xiang

•

Security & Testing

Implements a multi-stage quality assurance process to validate builds, types, tests, and security before code submission.

The Verification Loop skill provides a robust framework for ensuring code quality within Claude Code sessions. It guides the AI through a systematic six-phase verification process—including build checks, type validation, linting, comprehensive testing with coverage analysis, security scanning for secrets, and diff reviews—culminating in a detailed 'Ready for PR' report. This skill is essential for maintaining high engineering standards, catching regressions early, and ensuring that AI-generated code meets production-grade requirements before integration.

Key Features

01Multi-stage validation covering builds, types, and linting standards

02Standardized verification reports with clear Pass/Fail status indicators

03Automated test suite execution with coverage threshold monitoring

04Security scanning for leaked API keys, secrets, and debug logs

0561 GitHub stars

06Comprehensive Git diff review to identify unintended side effects

Use Cases

01Performing a final quality gate check before creating a Pull Request

02Validating code integrity after major refactoring or architectural changes

03Setting up recurring 'psychological checkpoints' during long development sessions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add xu-xiang/everything-claude-code-zh verification-loop

For use in Claude.ai and ChatGPT

Download Skill