pr_gatekeeper
Read-onlyIdempotent
Compound quality gate for pull requests. Runs three sequential checks: (1) secret detection — scans diff for API keys, tokens, passwords matching 16 regex patterns; (2) bug analysis — heuristic scan for eval(), innerHTML, empty catch, console.log, TODO/FIXME; (3) commit message linting against Conventional Commits spec. Returns gate verdict (PASS/WARN/BLOCK), blockers, and actionable warnings.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| diff | Yes | Unified git diff (output of `git diff HEAD`) | |
| context | No | Optional: PR title or description for richer bug analysis | |
| commit_message | Yes | The commit message to lint (e.g. "feat(auth): add OAuth2 login") |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| flags | No | ||
| score | No | ||
| checks | No | ||
| verdict | No |