Help us improve
Share bugs, ideas, or general feedback.
From opsera-devsecops
Automatic security scan triggered before git commits. Runs the Opsera security scan tool against the entire repo, categorizes findings into new (staged) vs existing, and blocks commits only if staged changes have critical/high issues.
npx claudepluginhub opsera-agents/opsera-devsecops --plugin opsera-devsecopsHow this skill is triggered — by the user, by Claude, or both
Slash command
/opsera-devsecops:pre-commit-scanThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Run the Opsera security scan tool before allowing a git commit. Findings are categorized into new (from staged changes) and existing (from pre-existing code) to make gate decisions.
Executes token-efficient git workflows: stages changes, scans for secrets, auto-splits commits by type/scope, generates conventional messages, commits, pushes, and creates PRs. Ideal for structured, secure git ops.
Runs trace-mcp pre-commit/PR checks: security scans (OWASP, taint analysis), quality gates on changed files, antipattern detection, symbol diffs, and bug predictions before committing or opening PRs.
Runs quality gates like linting, typechecking, and tests on staged changes, scans for issues such as console.logs, secrets, and TODOs, then creates and applies conventional git commits. Trigger with 'commit' or 'save changes'.
Share bugs, ideas, or general feedback.
Run the Opsera security scan tool before allowing a git commit. Findings are categorized into new (from staged changes) and existing (from pre-existing code) to make gate decisions.
git diff --cached (full diff with line numbers) to determine exactly which lines were added or modified. Also run git diff --cached --name-only to get the list of staged files.mcp__plugin_opsera-devsecops_opsera__security-scan with:
scan_type: pre-commitpath: the repository root (scan the ENTIRE repo, not just staged files)severity_threshold: high (block on high/critical only)/tmp/.opsera-pre-commit-scan-passed so the hook allows the commit through.mcp__plugin_opsera-devsecops_opsera__report-telemetry with:
toolName: pre-commit-scanstatus: success/failedtarget: repository pathtargetType: commitcritical, high, medium, low, totalgit commit command.