Primary finding
Build skill commits code without running tests, only typecheck
- .claude/skills/build.md:42-48
- .claude/skills/build.md:33-40
The per-tick execution loop runs `npm run typecheck` then commits with `git add -A`. For a launchpad that handles wallet connections, ERC-20 approvals, and on-chain vault deployments with depositors' funds, type-only validation is insufficient — runtime bugs (e.g., wrong ABI encoding, wrong decimal handling) will pass typecheck and ship. Additionally `git add -A` indiscriminately stages every modified file, which can leak local state (e.g., .env, build artifacts) into commits.
Recommendation
Add `npm test` (and a lint/format gate) to the per-tick pipeline; replace `git add -A` with explicit paths or a precommit hook that refuses to stage untracked files outside the launchpad workspace.