Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Validates project pre-deployment by running comprehensive security, testing, quality, documentation, CI/CD, privacy, maintainability, usability, marketabilit...
Validates project pre-deployment by running comprehensive security, testing, quality, documentation, CI/CD, privacy, maintainability, usability, marketabilit...
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run.
Multi-round automated validation pipeline for TypeScript/Solidity projects. Runs 8 rounds of checks before any publish or deploy: compile gate, lint, test suite, security audit, type coverage, docs, changelog, and final review. The gold standard โ catches what manual review misses. Originally built to validate the agent-wallet-sdk before every npm publish. Now available as a reusable skill for any project.
Before npm publish โ run the full 8-round validation Before merging a PR โ run as a quality gate After a dependency update โ verify nothing regressed On any TypeScript or Solidity project in the workspace
Run the Validator Agent on skills/agent-nexus-2/agent-wallet-sdk Or trigger specific rounds: Run Validator Agent round 0 (compile gate) on projects/mastra-plugin
cd <project> && npx tsc --noEmit 2>&1 If this fails, ALL subsequent rounds are BLOCKED. Nothing proceeds until compile is clean. This was added after a Feb 20 incident where broken types were published to npm.
cd <project> && npm run lint 2>&1 | tail -20 Check for lint errors. Warnings are noted but don't block. Errors block.
cd <project> && npm test 2>&1 Capture: total tests, passing, failing, skipped. Compare against baseline in ops/test-baselines.md if it exists. Any test count drop = regression = BLOCK.
cd <project> && npm audit 2>&1 | tail -15 0 vulnerabilities โ โ PASS Moderate only (transitive) โ โ ๏ธ WARN (note but don't block) HIGH or CRITICAL โ ๐จ BLOCK
cd <project> && npx type-coverage 2>&1 || echo "type-coverage not installed โ skip" If available, report percentage. Target: >95%. Below 90% = WARN.
Does README.md exist and reference current version? Does CHANGELOG.md have an entry for the version being published? Are all exported functions documented?
Read package.json version field Read CHANGELOG.md โ does it have an entry matching that version? If no changelog entry for current version โ BLOCK publish
Aggregate all rounds into a single verdict: # Validator Agent Report โ [project] โ [timestamp] ## Verdict: [โ PASS / โ ๏ธ WARN / ๐จ BLOCK] | Round | Check | Result | |-------|-------|--------| | 0 | Compile | โ /โ | | 1 | Lint | โ /โ ๏ธ/โ | | 2 | Tests | โ X/X passing / โ regression | | 3 | Security | โ /โ ๏ธ/๐จ | | 4 | Type Coverage | โ X% / โ ๏ธ / skipped | | 5 | Docs | โ /โ ๏ธ | | 6 | Changelog | โ /โ | | 7 | Summary | [verdict] | ## Blocking Issues [list or "None"] ## Warnings [list or "None"] ## Recommendation [PUBLISH / FIX FIRST / DO NOT PUBLISH] Save report to: ops/reports/validator-YYYY-MM-DD-HH-[project].md
The skill auto-detects project type from: package.json โ TypeScript/Node project foundry.toml โ Solidity/Forge project For Solidity projects, Round 0 uses forge build instead of tsc, Round 2 uses forge test, and Round 3 uses forge audit (if slither is available).
This skill is read-only โ it checks and reports, never modifies code It produces a recommendation, never auto-publishes Max or Bill must approve the publish after reviewing the report
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.