@h2loop/safe-c-coding-plugin 0.2.0 → 0.3.0

package/agents/safe-c-reviewer.md

@@ -2,12 +2,15 @@
 mode: subagent
 displayName: Safe-C Reviewer
 description: >-
-  Reviews C / C++ (.c, .h, .cpp, .hpp) against the safe-c-coding (MISRA C:2012-aligned)
-  guidelines and reports findings by severity. Given a file, diff, or code range, it scans
-  for undefined behaviour, dynamic allocation, unchecked returns, implicit conversions,
-  missing switch defaults, recursion, and other hazardous constructs, and reports each as
-  "severity — file:line — what's wrong -> safe fix". Use it to audit hand-written or
-  generated C/C++ before it lands, especially for embedded / safety-critical targets.
+  ALWAYS invoke this subagent once you have written, generated, or modified any C or C++
+  code (.c, .h, .cpp, .hpp), or whenever you want to review existing C/C++ code — do not
+  skip this for one-line changes or code that looks routine. Reviews the code against the
+  safe-c-coding (MISRA C:2012-aligned) guidelines. Given a file, diff, or code range, it
+  scans for undefined behaviour, dynamic allocation, unchecked returns, implicit
+  conversions, missing switch defaults, recursion, and other hazardous constructs, and
+  reports each as "severity — file:line — what's wrong -> safe fix". Use it to audit
+  hand-written or generated C/C++ before it lands, especially for embedded / safety-critical
+  targets.
 permission:
   # deny-all FIRST, then allow specifics: PermissionNext resolves with findLast
   # (last matching rule wins), so "*": deny MUST precede the allows or it overrides them.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@h2loop/safe-c-coding-plugin",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Safe-C coding plugin for Hydron — MISRA C:2012-aligned defensive C/C++ guidelines as an always-on skill plus a safe-c-reviewer subagent",
   "type": "module",
   "license": "UNLICENSED",
@@ -21,10 +21,14 @@
   ],
   "files": [
     ".hydron-plugin",
+    "plugins",
     "skills",
     "agents",
     "README.md"
   ],
+  "dependencies": {
+    "@kilocode/plugin": "*"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/h2loop/safe-c-misra-skill-plugin.git"

package/plugins/index.ts

@@ -0,0 +1,12 @@
+import type { Plugin } from "@kilocode/plugin"
+
+export const SafeCCodingPlugin: Plugin = async () => ({
+  "experimental.chat.system.transform": async (_input, output) => {
+    output.system.push(
+      "Before writing, generating, modifying, or reviewing any C or C++ code " +
+        "(.c, .h, .cpp, .hpp), invoke the safe-c-coding skill. After writing or " +
+        "modifying C/C++ code, invoke the safe-c-reviewer subagent. Do this even " +
+        "for a one-line change or code that looks routine.",
+    )
+  },
+})

package/skills/safe-c-coding/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: safe-c-coding
-description: Use when writing, generating, modifying, or reviewing C or C++ code (.c, .h, .cpp, .hpp), especially for embedded, automotive, medical, aerospace, or other safety-critical or resource-constrained targets where reliability, determinism, and freedom from undefined behaviour matter.
+description: ALWAYS invoke this skill before writing, generating, modifying, or reviewing any C or C++ code (.c, .h, .cpp, .hpp) — no exception for one-line changes, snippets, or code that looks routine. Applies especially to embedded, automotive, medical, aerospace, or other safety-critical or resource-constrained targets where reliability, determinism, and freedom from undefined behaviour matter, but the mandatory-invocation rule applies to all C/C++ work.
 ---
 
 # Safe C Coding