scan-contextual

Scan Contextual

Use this skill when the current Claude Code session touched supply-chain-sensitive files and you need a focused Guard run instead of a full repository scan.

When to use it

• package.json or pnpm-lock.yaml changed
• pnpm-workspace.yaml changed
• .guard/policy.yaml changed
• GitHub Actions workflows or CODEOWNERS changed

Workflow

1. Prefer guard scan --scope <scope> --files <repo-relative-paths> --format json.
2. Use the narrowest scope that matches the files:
   • deps
   • workspace
   • workflows
   • policy
3. Only fall back to a full guard scan when the touched surface is unclear.
4. Summarize blocking findings first, then warnings.
5. Do not auto-run guard fix from this skill.

Notes

• The plugin wrapper is guard-plugin.
• If there are no relevant files, say so and stop.