Simplify And Harden Ci

This is a CI-only code review workflow that scans pull requests for simplification opportunities and security hardening gaps without mutating any code. It runs headless checks on changed files only, emits structured YAML findings split by severity (critical/advisory), and can block merges based on configurable gates. The documentation is refreshingly honest about a real constraint: CI agents lack the full implementation context of the original author, so findings are treated as review signals rather than auto-applicable fixes. You get scan and report with optional merge blocking, plus a learning loop hook to feed recurring patterns back into your agent's context rules. Good fit if you want automated quality gates in PRs without the risk of CI making unreviewed code changes.

skills.sh installs: 391
GitHub stars: 331
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add pskoett/pskoett-ai-skills --skill simplify-and-harden-ci --agent claude-code

Installs into .claude/skills of the current project.

Files

Simplify & Harden CI

Install

gh skill install pskoett/pskoett-skills simplify-and-harden-ci

Fallback using the Agent Skills CLI:

npx skills add pskoett/pskoett-skills/skills/simplify-and-harden-ci

Purpose

Run a CI-only variant of Simplify & Harden in pull requests:

No code mutation in CI
Review only changed files
Emit structured findings
Optionally block merge based on severity gates

Use simplify-and-harden for interactive/local coding sessions.

Context Limitation (Important)

CI agents do not have the same peak implementation context as the coding agent that wrote the change. Treat CI findings as structured review signals, not as full intent-aware rewrites.

Implications: