lint-and-validate
Ensures code quality through automated linting, type validation, and security auditing.
Install
mkdir -p .claude/skills/lint-and-validate && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/2238" && unzip -o skill.zip -d .claude/skills/lint-and-validate && rm skill.zipInstalls to .claude/skills/lint-and-validate
Activation
This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.
Automatic quality control, linting, and static analysis procedures. Use after every code modification to ensure syntax correctness and project standards. Triggers onKeywords: lint, format, check, validate, types, static analysis.Key capabilities
- →Executes standardized linting via npm or ruff
- →Performs static type checking via tsc or mypy
- →Runs security audits using npm audit or bandit
- →Generates and parses error reports for code modification
- →Verifies code compliance before committing
How it works
It executes pre-configured bash commands for linting, type-checking, and security audits, then analyzes the terminal output to determine if code meets quality standards.
Inputs & outputs
When to use lint-and-validate
- →Running linting and formatting
- →Verifying type correctness
- →Auditing security vulnerabilities
- →Validating project standards
About this skill
Lint and Validate Skill
MANDATORY: Run appropriate validation tools after EVERY code change. Do not finish a task until the code is error-free.
Procedures by Ecosystem
Node.js / TypeScript
- Lint/Fix:
npm run lintornpx eslint "path" --fix - Types:
npx tsc --noEmit - Security:
npm audit --audit-level=high
Python
- Linter (Ruff):
ruff check "path" --fix(Fast & Modern) - Security (Bandit):
bandit -r "path" -ll - Types (MyPy):
mypy "path"
The Quality Loop
- Write/Edit Code
- Run Audit:
npm run lint && npx tsc --noEmit - Analyze Report: Check the "FINAL AUDIT REPORT" section.
- Fix & Repeat: Submitting code with "FINAL AUDIT" failures is NOT allowed.
Error Handling
- If
lintfails: Fix the style or syntax issues immediately. - If
tscfails: Correct type mismatches before proceeding. - If no tool is configured: Check the project root for
.eslintrc,tsconfig.json,pyproject.tomland suggest creating one.
Strict Rule: No code should be committed or reported as "done" without passing these checks.
Scripts
| Script | Purpose | Command |
|---|---|---|
scripts/lint_runner.py | Unified lint check | python scripts/lint_runner.py <project_path> |
scripts/type_coverage.py | Type coverage analysis | python scripts/type_coverage.py <project_path> |
When not to use it
- →During early-stage prototyping where syntax strictness slows iteration
- →When the project lacks any linting or static analysis configuration files
Prerequisites
Limitations
- →Requires pre-existing configuration files in the project root
- →Cannot fix logic errors, only syntax and type issues
- →Dependent on the quality of existing linting and typing rules
How it compares
It mandates a rigid, multi-stage quality loop that blocks completion unless all automated checks pass, unlike manual checks.
Compared to similar skills
lint-and-validate side by side with the closest alternatives in the catalog.
| Skill | Installs | Updated | Safety | Difficulty |
|---|---|---|---|---|
| lint-and-validate (this skill) | 6 | 6mo | Review | Beginner |
| moai-foundation-quality | 0 | 3mo | No flags | Advanced |
| verification-loop | 0 | 4mo | Review | Intermediate |
| codeql | 1 | 2mo | Review | Advanced |
Try saying
Example prompts that trigger this skill in your AI assistant.
More by davila7
View all by davila7 →You might also like
moai-foundation-quality
modu-ai
Enterprise code quality orchestrator with TRUST 5 validation, proactive analysis, and automated best practices enforcement
verification-loop
tom237ttkk
A comprehensive verification system for Codex work sessions.
codeql
trailofbits
Runs CodeQL static analysis for security vulnerability detection using interprocedural data flow and taint tracking. Applicable when finding vulnerabilities, running a security scan, performing a security audit, running CodeQL, building a CodeQL database, selecting query rulesets, creating data extension models, or processing CodeQL SARIF output. NOT for writing custom QL queries or CI/CD pipeline setup.
agent-implementer-sparc-coder
ruvnet
Agent skill for implementer-sparc-coder - invoke with $agent-implementer-sparc-coder
generating-test-data
jeremylongshore
Generate realistic test data including edge cases and boundary conditions. Use when creating realistic fixtures or edge case test data. Trigger with phrases like "generate test data", "create fixtures", or "setup test database".
langsmith-evaluator
dhar174
INVOKE THIS SKILL when building evaluation pipelines for LangSmith. Covers three core components: (1) Creating Evaluators - LLM-as-Judge, custom code; (2) Defining Run Functions - how to capture outputs and trajectories from your agent; (3) Running Evaluations - locally with evaluate() or auto-run v