Dev Review
FHIR/fhir-codegen
Performs a two-track code-quality and QA review in the roles of a staff-level Engineering Lead and QA Lead, then synthesizes both critiques into a single analysis.md.
Turn the /ship scorecard into a blocking, config-as-code quality gate.
Install Ship Gate
$ npx skills add Houseofmvps/ultraship --skill ship-gate -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install Houseofmvps/ultraship ship-gate --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/Houseofmvps/ultraship.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/ship-gate .claude/skills/ship-gate && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "ship-gate" agent skill from https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gate into .claude/skills/ship-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ship-gate", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gateType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add Houseofmvps/ultraship --skill ship-gate -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install Houseofmvps/ultraship ship-gate --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Houseofmvps/ultraship.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/ship-gate .agents/skills/ship-gate && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "ship-gate" agent skill from https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gate into .agents/skills/ship-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ship-gate", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Houseofmvps/ultraship --skill ship-gate -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install Houseofmvps/ultraship ship-gate --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Houseofmvps/ultraship.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/ship-gate .cursor/skills/ship-gate && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "ship-gate" agent skill from https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gate into .cursor/skills/ship-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ship-gate", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/Houseofmvps/ultraship.git --path skills/ship-gate--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add Houseofmvps/ultraship --skill ship-gate -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install Houseofmvps/ultraship ship-gate --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Houseofmvps/ultraship.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/ship-gate .gemini/skills/ship-gate && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "ship-gate" agent skill from https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gate into .gemini/skills/ship-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ship-gate", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install Houseofmvps/ultraship ship-gateInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add Houseofmvps/ultraship --skill ship-gate -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/Houseofmvps/ultraship.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/ship-gate .github/skills/ship-gate && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "ship-gate" agent skill from https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gate into .github/skills/ship-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ship-gate", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add Houseofmvps/ultraship --skill ship-gate -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install Houseofmvps/ultraship ship-gate --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/Houseofmvps/ultraship.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/ship-gate .opencode/skills/ship-gate && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "ship-gate" agent skill from https://github.com/Houseofmvps/ultraship/tree/main/skills/ship-gate into .opencode/skills/ship-gate/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "ship-gate", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
ship-gate- GitHub stars
- 123
- Token cost
- ~1k tokens
- SKILL.md length
- 405 words
- Files
- 1
- Skills in repo
- 28
- Repo updated
- First seen
- Licence
- MIT
At a glance
Turn the /ship scorecard into a blocking, config-as-code quality gate.
- Works in 4 steps: Initialize the config → Run the gate → Explain and fix failures → …
- The user wants a merge gate
- SKILL.md covers When to use, Process and Key Principles
- Calls node and git
What it does
Ship Gate is an agent skill from Houseofmvps/ultraship. Turn the /ship scorecard into a blocking, config-as-code quality gate. Sets per-category score thresholds, hard-fails on leaked secrets or critical findings, and wires the gate into a pre-push hook and CI so nothing below the bar merges. Use when the user wants a merge gate, CI quality gate, pre-push check, or to enforce ship-readiness.
Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Testing & QA, covering Quality gates, Secrets management and Code quality. The repository describes itself as: "ULTRASHIP" Claude Code plugin — 39 skills, 33 tools, 11 agents for ship-ready workflows: planning, review, pentesting, safety guardrails, canary monitoring, SEO/AI-readiness… The licence is MIT.
When your agent uses it
- The user wants a merge gate
- CI quality gate
- Enforce ship-readiness
Example prompts
- “/ship-gate”
Requirements
- Node.js
- Pre-approved tools (allowed-tools): Bash, Read, Edit, Grep, Glob
Workflow steps
4 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit ed232cb. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves these tools, so the agent can use them without asking each time:
BashReadEditGrepGlob
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
nodegit
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md. Its commands use git, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Ship Gate loads about 1k tokens when it runs. Until then it costs about 87 tokens; SKILL.md has 405 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NotePre-approves every shell command (allowed-tools: Bash)SKILL.md
allowed-tools: Bash, Read, Edit, Grep, Glob
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from Houseofmvps/ultraship at commit ed232cb, republished under its MIT licence (© Houseofmvps). 405 words, ~1,001 tokens.
Download SKILL.mdSave it as
.claude/skills/ship-gate/SKILL.md (or your agent's skills folder).- name
- ship-gate
- description
- Turn the /ship scorecard into a blocking, config-as-code quality gate. Sets per-category score thresholds, hard-fails on leaked secrets or critical findings, and wires the gate into a pre-push hook and CI so nothing below the bar merges. Use when the user wants a merge gate, CI quality gate, pre-push check, or to enforce ship-readiness.
- allowed-tools
- Bash, Read, Edit, Grep, Glob
- argument-hint
- [init|run|ci|hook] [directory]
Ship-Gate — Deterministic Quality Gate
The 2026 consensus on AI-written code is "did it pass the gates," not "did a senior read every line." This skill promotes the /ship scorecard from advisory to a blocking, deterministic gate: same scoring as /ship (shared tools/lib/ship-scoring.mjs), compared against thresholds in .ultraship/ship-gate.json, exiting non-zero so it can fail a push or a CI job.
When to use
The user wants a merge gate, a CI quality check, a pre-push guard, or to enforce a minimum ship-readiness score before code goes out.
Process
Phase 1: Initialize the config
node ${CLAUDE_PLUGIN_ROOT}/tools/ship-gate.mjs init <project-directory>Writes .ultraship/ship-gate.json:
{
"thresholds": { "overall": 80, "seo": 70, "a11y": 80, "security": 90, "quality": 70, "bundle": 70 },
"hardFail": { "onLeakedSecrets": true, "onCriticalFindings": true },
"skipMissing": true
}- thresholds — minimum score (0–100) per category and overall. Below it = fail.
- hardFail.onLeakedSecrets — any secret finding fails the gate regardless of score.
- hardFail.onCriticalFindings — any
critical-severity finding (any audit) fails the gate. - skipMissing — categories that didn't run (e.g. no HTML → SEO/a11y skipped) are ignored rather than failing. Set
falseto require every category.
Tune thresholds to the project. Sensible starting points: backend API → drop seo/a11y/bundle or rely on skipMissing; marketing site → raise seo/a11y; pre-revenue MVP → lower overall to 70.
Phase 2: Run the gate
node ${CLAUDE_PLUGIN_ROOT}/tools/ship-gate.mjs run <project-directory>
# or, installed: npx ultraship ship-gate .
# machine-readable: ... run <dir> --jsonIt runs all six auditors (seo, a11y, secrets, code-profiler, deps, bundle), scores them, and prints a PASS/FAIL table with a merge-confidence number (the overall score). Exit 0 = pass, exit 1 = fail.
Show full SKILL.md (198 more words)Show less
Phase 3: Explain and fix failures
When the gate fails, report exactly which checks were below the bar, then fix:
- Score below a category threshold → run that category's fixer:
/a11y,/secure,/seo,/profileapply fixes. - Leaked secret → remove it, rotate the key, move it to an env var (
/secure). - Critical finding → resolve it before anything else.
Re-run the gate to confirm it now passes. Never lower a threshold just to pass — fix the issue, or change the threshold only with the user's explicit agreement and a reason.
Phase 4: Enforce it (CI + pre-push)
Wire the gate in so it runs automatically:
# GitHub Actions workflow at .github/workflows/ship-gate.yml
node ${CLAUDE_PLUGIN_ROOT}/tools/ship-gate.mjs ci <project-directory>
# Local git pre-push hook (.git/hooks/pre-push) — blocks a push that fails the gate
node ${CLAUDE_PLUGIN_ROOT}/tools/ship-gate.mjs hook <project-directory>Tell the user how to bypass the local hook in an emergency: git push --no-verify. The CI gate has no bypass by design.
Key Principles
- One source of truth. The gate and
/shipshare the same scoring module — the gate can never disagree with the scorecard. - Deterministic. Same input → same verdict. Auditable for SOC2/ISO/HIPAA, unlike an LLM-only "looks fine."
- Fix, don't dodge. Failing the gate means fixing the code, not weakening the threshold.
- Never block on a missing tool. A tool that can't run leaves its category skipped (or fails only if
skipMissing:false), never crashes the gate.
© Houseofmvps, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in skills/ship-gate of Houseofmvps/ultraship.
Open the folder on GitHubat commit ed232cb
Compare with similar skills
Ship Gate next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Ship Gate this skillHouseofmvps/ultraship | 123 | — | ~1k | Automated safety check: Notes | MIT | |
| Dev ReviewFHIR/fhir-codegen | 154 | — | ~5k | Automated safety check: Pass | MIT | |
| Sonarcloud APIaehrc/pathling | 137 | — | ~1.2k | Automated safety check: Pass | Apache-2.0 | |
| Quality CImanagedcode/dotnet-skills | 486 | — | ~2.1k | Automated safety check: Pass | MIT | |
| Code Quality Crapmacalbert/envilder | 138 | — | ~468 | Automated safety check: Pass | MIT | |
| Constraint-Driven Developmentaddyosmani/agent-skills | 103k | 2 repos | ~5.2k | Automated safety check: Pass | MIT |
Similar skills
Sonarcloud API
aehrc/pathling
Expert guidance for using the SonarCloud API to interact with code quality analysis, projects, issues, quality gates, and metrics.
Quality CI
managedcode/dotnet-skills
Set up or refine open-source .NET code-quality gates for CI: formatting, .editorconfig, SDK analyzers, third-party analyzers, coverage, mutation testing, architecture tests, and security scanning.
Code Quality Crap
macalbert/envilder
CRAP score quality gate for code complexity and test coverage.
Constraint-Driven Development
addyosmani/agent-skills
Records a project's quality bar in CONSTRAINTS.md and watches diffs for signs an agent quietly weakened it, such as suppressions, skipped tests or lowered thresholds.
Hydra Dev
streamband/hydra-srt
Run HydraSRT development workflows: mix q quality gate, Elixir unit/E2E tests, native Rust tests, web Vitest/Playwright, and make dev.
More from Houseofmvps/ultraship
All 28 skills in this repoUsing Ultraship
Houseofmvps/ultraship
A skill your agent uses when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying questions
A11y
Houseofmvps/ultraship
Accessibility audit + auto-fix (WCAG 2.2 A/AA). An agent skill from Houseofmvps/ultraship.
Architecture
Houseofmvps/ultraship
Living Architecture Map — auto-generate Mermaid diagrams of your codebase.
Clone Patterns
Houseofmvps/ultraship
Learn From the Best — analyze patterns from any codebase and apply them to yours.
Code Review
Houseofmvps/ultraship
Code review with principal-engineer-level depth. An agent skill from Houseofmvps/ultraship.
Compete
Houseofmvps/ultraship
Competitive X-Ray — analyze any competitor URL vs your site.
Related
Categories
Questions about Ship Gate
What does Ship Gate do?
Turn the /ship scorecard into a blocking, config-as-code quality gate. Ship Gate is an agent skill from Houseofmvps/ultraship. Turn the /ship scorecard into a blocking, config-as-code quality gate.
When should I use Ship Gate?
Ship Gate fits situations like: the user wants a merge gate; CI quality gate; enforce ship-readiness.
How do I install Ship Gate in Claude Code?
Run `npx skills add Houseofmvps/ultraship --skill ship-gate -a claude-code`. Or copy the skill folder (skills/ship-gate in Houseofmvps/ultraship) into .claude/skills/ship-gate in your project. Claude Code loads it when a task matches its description.
How do I install Ship Gate in Codex?
Run `npx skills add Houseofmvps/ultraship --skill ship-gate -a codex`. Or copy the skill folder (skills/ship-gate in Houseofmvps/ultraship) into .agents/skills/ship-gate in your project. Codex loads it when a task matches its description.
Can I use Ship Gate in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add Houseofmvps/ultraship --skill ship-gate -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/ship-gate, .gemini/skills/ship-gate, .github/skills/ship-gate and .opencode/skills/ship-gate in your project.
What does Ship Gate need to run?
Going by SKILL.md and its folder, Ship Gate needs the command-line tools its instructions call (node and git). Our summary lists: Node.js. Its frontmatter pre-approves these tools: Bash, Read, Edit, Grep, Glob.
Does Ship Gate access the network?
SKILL.md contains no URLs. Its commands use git, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Is Ship Gate safe to install?
Our automated static check of SKILL.md found notes only (pre-approves every shell command (allowed-tools: bash)), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Ship Gate use?
Ship Gate is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Ship Gate use?
About 1k tokens (SKILL.md is roughly 4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Ship Gate?
Skills that share tags, products or a category with Ship Gate: Dev Review (FHIR/fhir-codegen, 154 stars), Sonarcloud API (aehrc/pathling, 137 stars), Quality CI (managedcode/dotnet-skills, 486 stars) and Code Quality Crap (macalbert/envilder, 138 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Ship Gate?
Houseofmvps (a GitHub user) maintains it in Houseofmvps/ultraship, which has 123 GitHub stars. The repository holds 28 skills in this directory. The repository was last updated on July 8, 2026.
Source: Houseofmvps/ultraship on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.