@jhm1909/ag-kit 0.2.1 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agent/skills/code-review/SKILL.md +30 -35
- package/.agent/skills/designer/SKILL.md +14 -14
- package/.agent/skills/frontend-developer/SKILL.md +2 -2
- package/.agent/skills/mcp-builder/SKILL.md +18 -18
- package/.agent/skills/mcp-builder/references/evaluation.md +1 -1
- package/.agent/skills/project-manager/SKILL.md +23 -28
- package/.agent/skills/qa-tester/SKILL.md +42 -46
- package/cli/index.js +1 -1
- package/package.json +1 -1
- /package/.agent/skills/code-review/references/{differential_review.md → differential-review.md} +0 -0
- /package/.agent/skills/code-review/references/{spec_compliance.md → spec-compliance.md} +0 -0
- /package/.agent/skills/designer/references/{frontend_design_aesthetics.md → frontend-design-aesthetics.md} +0 -0
- /package/.agent/skills/frontend-developer/references/{composition_patterns.md → composition-patterns.md} +0 -0
- /package/.agent/skills/frontend-developer/references/{react_performance_rules.md → react-performance-rules.md} +0 -0
- /package/.agent/skills/mcp-builder/references/{mcp_best_practices.md → mcp-best-practices.md} +0 -0
- /package/.agent/skills/mcp-builder/references/{node_mcp_server.md → node-mcp-server.md} +0 -0
- /package/.agent/skills/mcp-builder/references/{python_mcp_server.md → python-mcp-server.md} +0 -0
- /package/.agent/skills/project-manager/references/{discovery_process.md → discovery-process.md} +0 -0
- /package/.agent/skills/project-manager/references/{jobs_to_be_done.md → jobs-to-be-done.md} +0 -0
- /package/.agent/skills/project-manager/references/{prd_development.md → prd-development.md} +0 -0
- /package/.agent/skills/qa-tester/references/{accessibility_testing.md → accessibility-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{agent_browser.md → agent-browser.md} +0 -0
- /package/.agent/skills/qa-tester/references/automation/{api_testing.md → api-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/automation/{best_practices.md → best-practices.md} +0 -0
- /package/.agent/skills/qa-tester/references/automation/{jest_vitest.md → jest-vitest.md} +0 -0
- /package/.agent/skills/qa-tester/references/{e2e_testing.md → e2e-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{integration_testing.md → integration-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{performance_testing.md → performance-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{property_based_testing.md → property-based-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{security_audit.md → security-audit.md} +0 -0
- /package/.agent/skills/qa-tester/references/{security_testing.md → security-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{sharp_edges.md → sharp-edges.md} +0 -0
- /package/.agent/skills/qa-tester/references/{static_analysis.md → static-analysis.md} +0 -0
- /package/.agent/skills/qa-tester/references/{supply_chain_audit.md → supply-chain-audit.md} +0 -0
- /package/.agent/skills/qa-tester/references/{test_case_standards.md → test-case-standards.md} +0 -0
- /package/.agent/skills/qa-tester/references/{test_report_template.md → test-report-template.md} +0 -0
- /package/.agent/skills/qa-tester/references/{unit_testing.md → unit-testing.md} +0 -0
- /package/.agent/skills/qa-tester/references/{visual_testing.md → visual-testing.md} +0 -0
|
@@ -16,9 +16,9 @@ Guide proper code review practices: technical rigor, evidence-based claims, secu
|
|
|
16
16
|
|
|
17
17
|
## Three Practices
|
|
18
18
|
|
|
19
|
-
1. **Receiving feedback**
|
|
20
|
-
2. **Requesting reviews**
|
|
21
|
-
3. **Verification gates**
|
|
19
|
+
1. **Receiving feedback** ??Technical evaluation over performative agreement
|
|
20
|
+
2. **Requesting reviews** ??Systematic review process
|
|
21
|
+
3. **Verification gates** ??Evidence before any completion claims
|
|
22
22
|
|
|
23
23
|
## Core Principle
|
|
24
24
|
|
|
@@ -28,36 +28,31 @@ Guide proper code review practices: technical rigor, evidence-based claims, secu
|
|
|
28
28
|
|
|
29
29
|
```
|
|
30
30
|
SITUATION?
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
│ └─ Major feature/task? → Run verification, present evidence
|
|
45
|
-
│
|
|
46
|
-
└─ About to claim status
|
|
47
|
-
├─ Have fresh verification? → State claim WITH evidence
|
|
48
|
-
└─ No fresh verification? → RUN verification command first
|
|
31
|
+
???��? Received feedback
|
|
32
|
+
?? ?��? Unclear items? ??STOP, ask for clarification first
|
|
33
|
+
?? ?��? From human partner? ??Understand, then implement
|
|
34
|
+
?? ?��? From external reviewer? ??Verify technically before implementing
|
|
35
|
+
???��? Security-focused PR review?
|
|
36
|
+
?? ?��? Read: differential-review.md (blast radius, risk classification)
|
|
37
|
+
???��? Spec-to-code compliance check?
|
|
38
|
+
?? ?��? Read: spec-compliance.md (6-phase audit methodology)
|
|
39
|
+
???��? Completed work
|
|
40
|
+
?? ?��? Major feature/task? ??Run verification, present evidence
|
|
41
|
+
???��? About to claim status
|
|
42
|
+
?��? Have fresh verification? ??State claim WITH evidence
|
|
43
|
+
?��? No fresh verification? ??RUN verification command first
|
|
49
44
|
```
|
|
50
45
|
|
|
51
46
|
## Receiving Feedback Protocol
|
|
52
47
|
|
|
53
|
-
**Pattern**: READ
|
|
48
|
+
**Pattern**: READ ??UNDERSTAND ??VERIFY ??EVALUATE ??RESPOND ??IMPLEMENT
|
|
54
49
|
|
|
55
50
|
**Key Rules**:
|
|
56
|
-
-
|
|
57
|
-
-
|
|
58
|
-
-
|
|
59
|
-
-
|
|
60
|
-
-
|
|
51
|
+
- ??No performative agreement: "You're absolutely right!", "Great point!"
|
|
52
|
+
- ??No implementation before verification
|
|
53
|
+
- ??Restate requirement, ask questions, push back with technical reasoning
|
|
54
|
+
- ??If unclear: STOP and ask for clarification on ALL unclear items first
|
|
55
|
+
- ??YAGNI check: grep for usage before implementing suggested features
|
|
61
56
|
|
|
62
57
|
**Full protocol**: [code-review-reception.md](./references/code-review-reception.md)
|
|
63
58
|
|
|
@@ -72,14 +67,14 @@ SITUATION?
|
|
|
72
67
|
| Bug fixed | Original symptom passes | "Code changed" |
|
|
73
68
|
| Requirements met | Line-by-line checklist | "Tests passing" |
|
|
74
69
|
|
|
75
|
-
**Red Flags
|
|
70
|
+
**Red Flags ??STOP**:
|
|
76
71
|
- Using "should", "probably", "seems to"
|
|
77
72
|
- Expressing satisfaction before verification
|
|
78
73
|
- Committing without verification
|
|
79
74
|
|
|
80
75
|
**Full protocol**: [verification-before-completion.md](./references/verification-before-completion.md)
|
|
81
76
|
|
|
82
|
-
## Security Review
|
|
77
|
+
## Security Review ??Risk Classification
|
|
83
78
|
|
|
84
79
|
| Risk Level | Triggers |
|
|
85
80
|
|------------|----------|
|
|
@@ -93,7 +88,7 @@ SITUATION?
|
|
|
93
88
|
- Validation removed without replacement
|
|
94
89
|
- High blast radius (50+ callers) + HIGH risk change
|
|
95
90
|
|
|
96
|
-
**Full methodology**: [
|
|
91
|
+
**Full methodology**: [differential-review.md](./references/differential-review.md)
|
|
97
92
|
|
|
98
93
|
## References
|
|
99
94
|
|
|
@@ -102,12 +97,12 @@ SITUATION?
|
|
|
102
97
|
| `code-review-reception.md` | Receiving feedback protocol |
|
|
103
98
|
| `verification-before-completion.md` | Iron Law verification gates |
|
|
104
99
|
| `requesting-code-review.md` | How to request reviews |
|
|
105
|
-
| `
|
|
106
|
-
| `
|
|
100
|
+
| `differential-review.md` | Security PR review (Trail of Bits) |
|
|
101
|
+
| `spec-compliance.md` | Spec-to-code audit (Trail of Bits) |
|
|
107
102
|
|
|
108
103
|
## Bottom Line
|
|
109
104
|
|
|
110
|
-
1. Technical rigor over social performance
|
|
111
|
-
2. Evidence before claims
|
|
112
|
-
3. Security before speed
|
|
105
|
+
1. Technical rigor over social performance ??No performative agreement
|
|
106
|
+
2. Evidence before claims ??Verification gates always
|
|
107
|
+
3. Security before speed ??Risk-classify every PR change
|
|
113
108
|
4. Verify. Question. Then implement. Evidence. Then claim.
|
|
@@ -13,7 +13,7 @@ metadata:
|
|
|
13
13
|
estimated_tokens: 15000
|
|
14
14
|
---
|
|
15
15
|
|
|
16
|
-
# Designer
|
|
16
|
+
# Designer ??Design Intelligence
|
|
17
17
|
|
|
18
18
|
Expert design guidance powered by a **searchable design database** with BM25 ranking.
|
|
19
19
|
|
|
@@ -73,10 +73,10 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
|
|
|
73
73
|
### Workflow
|
|
74
74
|
|
|
75
75
|
```
|
|
76
|
-
1. ANALYZE requirements
|
|
77
|
-
2. SEARCH --design-system
|
|
78
|
-
3. DEEP-DIVE --domain
|
|
79
|
-
4. IMPLEMENT
|
|
76
|
+
1. ANALYZE requirements ??product type, audience, style keywords
|
|
77
|
+
2. SEARCH --design-system ??get full recommendation
|
|
78
|
+
3. DEEP-DIVE --domain ??supplement specific needs
|
|
79
|
+
4. IMPLEMENT ??using verified, data-driven choices
|
|
80
80
|
```
|
|
81
81
|
|
|
82
82
|
---
|
|
@@ -93,7 +93,7 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
|
|
|
93
93
|
| 6 | Typography & Color | MEDIUM | Base 16px, line-height 1.5, semantic tokens |
|
|
94
94
|
| 7 | Animation | MEDIUM | 150-300ms, transform/opacity only, reduced-motion |
|
|
95
95
|
| 8 | Forms & Feedback | MEDIUM | Visible labels, error near field, progressive disclosure |
|
|
96
|
-
| 9 | Navigation | HIGH | Bottom nav
|
|
96
|
+
| 9 | Navigation | HIGH | Bottom nav ??, predictable back, deep linking |
|
|
97
97
|
| 10 | Charts & Data | LOW | Legends, tooltips, accessible colors |
|
|
98
98
|
|
|
99
99
|
---
|
|
@@ -101,14 +101,14 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
|
|
|
101
101
|
## Core Principles
|
|
102
102
|
|
|
103
103
|
### Intentionality Over Trends
|
|
104
|
-
- **Why this color?**
|
|
105
|
-
- **Why this font?**
|
|
106
|
-
- **Why this animation?**
|
|
104
|
+
- **Why this color?** ??Brand meaning, accessibility, contrast
|
|
105
|
+
- **Why this font?** ??Readability, personality, performance
|
|
106
|
+
- **Why this animation?** ??User feedback, spatial understanding
|
|
107
107
|
|
|
108
108
|
### Distinctive Over Generic (Anti-AI-Slop)
|
|
109
|
-
-
|
|
110
|
-
-
|
|
111
|
-
-
|
|
109
|
+
- ??Default gradients, Inter everywhere, card templates
|
|
110
|
+
- ??Committed aesthetic, unique typography, contextual layouts
|
|
111
|
+
- ?�� Load [Frontend Design Aesthetics](./references/frontend-design-aesthetics.md) for Anthropic's anti-AI-slop guide
|
|
112
112
|
|
|
113
113
|
### Technical Excellence
|
|
114
114
|
- Semantic HTML first
|
|
@@ -127,12 +127,12 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
|
|
|
127
127
|
|
|
128
128
|
### Interaction
|
|
129
129
|
- [ ] All tappable elements have press feedback
|
|
130
|
-
- [ ] Touch targets
|
|
130
|
+
- [ ] Touch targets ??4×44pt
|
|
131
131
|
- [ ] Micro-interactions 150-300ms
|
|
132
132
|
- [ ] Disabled states visually clear
|
|
133
133
|
|
|
134
134
|
### Light/Dark Mode
|
|
135
|
-
- [ ] Primary text contrast
|
|
135
|
+
- [ ] Primary text contrast ??.5:1 in both modes
|
|
136
136
|
- [ ] Dividers/borders visible in both modes
|
|
137
137
|
- [ ] Both themes tested before delivery
|
|
138
138
|
|
|
@@ -109,8 +109,8 @@ User: "Add a 3D model viewer to my React app"
|
|
|
109
109
|
|
|
110
110
|
| Reference | Purpose |
|
|
111
111
|
|:----------|:--------|
|
|
112
|
-
| `
|
|
113
|
-
| `
|
|
112
|
+
| `react-performance-rules.md` | 65 Vercel React/Next.js perf rules (8 categories) |
|
|
113
|
+
| `composition-patterns.md` | React composition patterns (Vercel) |
|
|
114
114
|
|
|
115
115
|
## Related Skills
|
|
116
116
|
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: mcp-builder
|
|
3
|
-
description: Guide for creating production-grade MCP (Model Context Protocol) servers. Use when building MCP servers to integrate external APIs, databases, or services
|
|
3
|
+
description: Guide for creating production-grade MCP (Model Context Protocol) servers. Use when building MCP servers to integrate external APIs, databases, or services ??whether in TypeScript (MCP SDK) or Python (FastMCP). Covers architecture, tool design, security, evaluation, and best practices.
|
|
4
4
|
---
|
|
5
5
|
|
|
6
6
|
# MCP Server Development Guide
|
|
@@ -11,7 +11,7 @@ description: Guide for creating production-grade MCP (Model Context Protocol) se
|
|
|
11
11
|
|
|
12
12
|
Create MCP servers that enable LLMs to interact with external services through well-designed tools. Quality is measured by how well it enables LLMs to accomplish real-world tasks.
|
|
13
13
|
|
|
14
|
-
##
|
|
14
|
+
## ?? High-Level Workflow
|
|
15
15
|
|
|
16
16
|
### Phase 1: Deep Research and Planning
|
|
17
17
|
|
|
@@ -24,9 +24,9 @@ Create MCP servers that enable LLMs to interact with external services through w
|
|
|
24
24
|
2. **Study Framework Documentation**
|
|
25
25
|
- **Recommended stack**: TypeScript (best SDK support + AI compatibility)
|
|
26
26
|
- **Transport**: Streamable HTTP for remote, stdio for local
|
|
27
|
-
- Load: [
|
|
28
|
-
- Load: [
|
|
29
|
-
- Load: [
|
|
27
|
+
- Load: [?�� MCP Best Practices](./references/mcp_best-practices.md)
|
|
28
|
+
- Load: [??TypeScript Guide](./references/node-mcp-server.md)
|
|
29
|
+
- Load: [?�� Python Guide](./references/python-mcp-server.md)
|
|
30
30
|
|
|
31
31
|
3. **Plan Implementation**
|
|
32
32
|
- Review the service's API documentation
|
|
@@ -35,8 +35,8 @@ Create MCP servers that enable LLMs to interact with external services through w
|
|
|
35
35
|
|
|
36
36
|
### Phase 2: Implementation
|
|
37
37
|
|
|
38
|
-
1. **Project Structure**
|
|
39
|
-
2. **Core Infrastructure**
|
|
38
|
+
1. **Project Structure** ??see language-specific guides
|
|
39
|
+
2. **Core Infrastructure** ??API client, error handling, pagination, response formatting
|
|
40
40
|
3. **Tool Implementation**:
|
|
41
41
|
- Input Schema: Zod (TS) or Pydantic (Python) with constraints
|
|
42
42
|
- Output Schema: Define `outputSchema` where possible
|
|
@@ -51,24 +51,24 @@ Create MCP servers that enable LLMs to interact with external services through w
|
|
|
51
51
|
|
|
52
52
|
### Phase 4: Create Evaluations
|
|
53
53
|
|
|
54
|
-
Load [
|
|
54
|
+
Load [??Evaluation Guide](./references/evaluation.md) for complete guidelines.
|
|
55
55
|
|
|
56
56
|
Create 10 evaluation questions that are:
|
|
57
|
-
- **Independent**
|
|
58
|
-
- **Read-only**
|
|
59
|
-
- **Complex**
|
|
60
|
-
- **Realistic**
|
|
61
|
-
- **Verifiable**
|
|
62
|
-
- **Stable**
|
|
57
|
+
- **Independent** ??not dependent on other questions
|
|
58
|
+
- **Read-only** ??non-destructive operations only
|
|
59
|
+
- **Complex** ??requiring multiple tool calls
|
|
60
|
+
- **Realistic** ??based on real use cases
|
|
61
|
+
- **Verifiable** ??single, clear answer
|
|
62
|
+
- **Stable** ??answer won't change over time
|
|
63
63
|
|
|
64
64
|
## Reference Files
|
|
65
65
|
|
|
66
66
|
| File | When to Load |
|
|
67
67
|
|------|-------------|
|
|
68
|
-
| [
|
|
69
|
-
| [
|
|
70
|
-
| [
|
|
71
|
-
| [evaluation.md](./references/evaluation.md) | Phase 4
|
|
68
|
+
| [mcp_best-practices.md](./references/mcp_best-practices.md) | Always ??naming, security, pagination, transport |
|
|
69
|
+
| [node-mcp-server.md](./references/node-mcp-server.md) | TypeScript/Node implementation |
|
|
70
|
+
| [python-mcp-server.md](./references/python-mcp-server.md) | Python/FastMCP implementation |
|
|
71
|
+
| [evaluation.md](./references/evaluation.md) | Phase 4 ??creating quality evaluations |
|
|
72
72
|
|
|
73
73
|
## Knowledge Graph
|
|
74
74
|
|
|
@@ -511,7 +511,7 @@ The evaluation script generates a detailed report including:
|
|
|
511
511
|
- **Per-Task Results**:
|
|
512
512
|
- Prompt and expected response
|
|
513
513
|
- Actual response from the agent
|
|
514
|
-
- Whether the answer was correct (
|
|
514
|
+
- Whether the answer was correct (????
|
|
515
515
|
- Duration and tool call details
|
|
516
516
|
- Agent's summary of its approach
|
|
517
517
|
- Agent's feedback on the tools
|
|
@@ -30,30 +30,25 @@ Deliver value through efficient systems and clear processes.
|
|
|
30
30
|
|
|
31
31
|
## Core Philosophy
|
|
32
32
|
|
|
33
|
-
1. **Outcome & Efficiency**
|
|
34
|
-
2. **Voice of User & Team**
|
|
35
|
-
3. **Ruthless Prioritization**
|
|
36
|
-
4. **Automated Governance**
|
|
33
|
+
1. **Outcome & Efficiency** ??Value (Product) through efficient systems (Process)
|
|
34
|
+
2. **Voice of User & Team** ??Represent user in requirements, team in process
|
|
35
|
+
3. **Ruthless Prioritization** ??"No" protects focus
|
|
36
|
+
4. **Automated Governance** ??Automate rules, don't just follow them
|
|
37
37
|
|
|
38
38
|
## Decision Tree
|
|
39
39
|
|
|
40
40
|
```
|
|
41
41
|
What PM activity is needed?
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
├─ Strategic planning?
|
|
53
|
-
│ └─ Use: strategic-frameworks (Roadmap, OKRs)
|
|
54
|
-
│
|
|
55
|
-
└─ Process / Governance?
|
|
56
|
-
└─ Use: rules-guide, workflows-guide
|
|
42
|
+
???��? Discovery / Research?
|
|
43
|
+
?? ?��? Read: discovery-process.md (6-phase workflow)
|
|
44
|
+
???��? PRD / Requirements?
|
|
45
|
+
?? ?��? Read: prd-development.md (10-section template)
|
|
46
|
+
???��? Understanding customer needs?
|
|
47
|
+
?? ?��? Read: jobs-to-be-done.md (JTBD framework)
|
|
48
|
+
???��? Strategic planning?
|
|
49
|
+
?? ?��? Use: strategic-frameworks (Roadmap, OKRs)
|
|
50
|
+
???��? Process / Governance?
|
|
51
|
+
?��? Use: rules-guide, workflows-guide
|
|
57
52
|
```
|
|
58
53
|
|
|
59
54
|
## Capabilities
|
|
@@ -69,9 +64,9 @@ What PM activity is needed?
|
|
|
69
64
|
|
|
70
65
|
## Quick Rules
|
|
71
66
|
|
|
72
|
-
- **Repeated 3x?**
|
|
73
|
-
- **Mistake 2x?**
|
|
74
|
-
- **Domain-specific?**
|
|
67
|
+
- **Repeated 3x?** ??Make a **Workflow** (`.agent/workflows/`)
|
|
68
|
+
- **Mistake 2x?** ??Make a **Rule** (`.agent/rules/`)
|
|
69
|
+
- **Domain-specific?** ??Consult **[[business-analysis]]**
|
|
75
70
|
|
|
76
71
|
## Skill Detection Matrix
|
|
77
72
|
|
|
@@ -95,15 +90,15 @@ What PM activity is needed?
|
|
|
95
90
|
| `templates/rfc.md` | Request for Comments |
|
|
96
91
|
| `templates/prd-template.md` | Product Requirements |
|
|
97
92
|
| `templates/user-story-template.md` | User stories |
|
|
98
|
-
| `
|
|
99
|
-
| `
|
|
100
|
-
| `
|
|
93
|
+
| `discovery-process.md` | Product discovery 6-phase workflow (Dean Peters) |
|
|
94
|
+
| `prd-development.md` | Structured PRD creation guide (Dean Peters) |
|
|
95
|
+
| `jobs-to-be-done.md` | JTBD framework (Dean Peters) |
|
|
101
96
|
|
|
102
97
|
## Related Skills
|
|
103
98
|
|
|
104
|
-
- [[business-analysis]]
|
|
105
|
-
- [[qa-tester]]
|
|
106
|
-
- [[lead-architect]]
|
|
99
|
+
- [[business-analysis]] ??Deep requirements analysis
|
|
100
|
+
- [[qa-tester]] ??Quality and testing
|
|
101
|
+
- [[lead-architect]] ??High-level technical decisions
|
|
107
102
|
|
|
108
103
|
---
|
|
109
104
|
|
|
@@ -30,31 +30,27 @@ Comprehensive testing + security auditing for high-quality software delivery.
|
|
|
30
30
|
|
|
31
31
|
## Core Philosophy
|
|
32
32
|
|
|
33
|
-
1. **Docs First**
|
|
34
|
-
2. **No Assumptions**
|
|
35
|
-
3. **Verify Everything**
|
|
36
|
-
4. **Trust No Input**
|
|
37
|
-
5. **Pit of Success**
|
|
33
|
+
1. **Docs First** ??Base all testing on `docs/` folder requirements
|
|
34
|
+
2. **No Assumptions** ??Missing docs? STOP and CONFIRM with user
|
|
35
|
+
3. **Verify Everything** ??Happy path, negative path, boundaries, edges
|
|
36
|
+
4. **Trust No Input** ??Every input is a potential attack vector
|
|
37
|
+
5. **Pit of Success** ??Secure usage should be the path of least resistance
|
|
38
38
|
|
|
39
39
|
## Decision Tree
|
|
40
40
|
|
|
41
41
|
```
|
|
42
42
|
What testing is needed?
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
│ └─ Read: property_based_testing.md
|
|
55
|
-
│
|
|
56
|
-
└─ Performance testing?
|
|
57
|
-
└─ Read: performance_testing.md
|
|
43
|
+
???��? Functional testing?
|
|
44
|
+
?? ?��? Read: test-case-standards.md, unit-testing.md, e2e-testing.md
|
|
45
|
+
???��? Security audit?
|
|
46
|
+
?? ?��? Insecure defaults/hardcoded secrets? ??Read: security-audit.md
|
|
47
|
+
?? ?��? API footgun analysis? ??Read: sharp-edges.md
|
|
48
|
+
?? ?��? Dependency risk? ??Read: supply-chain-audit.md
|
|
49
|
+
?? ?��? Static analysis scan? ??Read: static-analysis.md
|
|
50
|
+
???��? Property-based testing?
|
|
51
|
+
?? ?��? Read: property-based-testing.md
|
|
52
|
+
???��? Performance testing?
|
|
53
|
+
?��? Read: performance-testing.md
|
|
58
54
|
```
|
|
59
55
|
|
|
60
56
|
## Test Types
|
|
@@ -75,15 +71,15 @@ What testing is needed?
|
|
|
75
71
|
|
|
76
72
|
### Noun-Verb Extraction
|
|
77
73
|
Scan docs for **Nouns** (User, Order) and **Verbs** (Register, Checkout)
|
|
78
|
-
|
|
74
|
+
??Each Action = At least 1 Test Case
|
|
79
75
|
|
|
80
76
|
### Keyword Permutations
|
|
81
77
|
Look for "MUST", "CANNOT", "ONLY IF"
|
|
82
|
-
|
|
78
|
+
??Test constraint met AND violated
|
|
83
79
|
|
|
84
80
|
### State Transition Mapping
|
|
85
|
-
Entity states (Pending
|
|
86
|
-
|
|
81
|
+
Entity states (Pending ??Paid ??Shipped)
|
|
82
|
+
??Test valid AND invalid transitions
|
|
87
83
|
|
|
88
84
|
### Property Detection (PBT)
|
|
89
85
|
| Pattern | Property | Priority |
|
|
@@ -97,7 +93,7 @@ Entity states (Pending → Paid → Shipped)
|
|
|
97
93
|
|
|
98
94
|
When auditing code security, check:
|
|
99
95
|
|
|
100
|
-
- [ ] **Insecure defaults**: `env.get(X) or 'fallback'`
|
|
96
|
+
- [ ] **Insecure defaults**: `env.get(X) or 'fallback'` ??fail-open patterns
|
|
101
97
|
- [ ] **Hardcoded secrets**: `password = "..."`, `API_KEY = "..."`
|
|
102
98
|
- [ ] **Weak crypto**: MD5, SHA1, DES, RC4, ECB in security contexts
|
|
103
99
|
- [ ] **Permissive CORS**: `Access-Control-Allow-Origin: *`
|
|
@@ -107,35 +103,35 @@ When auditing code security, check:
|
|
|
107
103
|
|
|
108
104
|
## Coverage Requirements
|
|
109
105
|
|
|
110
|
-
-
|
|
111
|
-
-
|
|
112
|
-
-
|
|
113
|
-
-
|
|
114
|
-
-
|
|
115
|
-
-
|
|
106
|
+
- ??**Happy Path** ??Golden flow
|
|
107
|
+
- ??**Negative Path** ??Error handling
|
|
108
|
+
- ??**Boundary** ??Off-by-one (0, 1, Max)
|
|
109
|
+
- ??**Edge Cases** ??Timeouts, failures, concurrency
|
|
110
|
+
- ??**Integration** ??Cross-module flows
|
|
111
|
+
- ??**Security** ??Injection, auth bypass, data leaks
|
|
116
112
|
|
|
117
113
|
## References
|
|
118
114
|
|
|
119
115
|
| Reference | Purpose |
|
|
120
116
|
|:----------|:--------|
|
|
121
|
-
| `
|
|
122
|
-
| `
|
|
123
|
-
| `
|
|
124
|
-
| `
|
|
125
|
-
| `
|
|
126
|
-
| `
|
|
127
|
-
| `
|
|
128
|
-
| `
|
|
129
|
-
| `
|
|
130
|
-
| `
|
|
131
|
-
| `
|
|
117
|
+
| `test-case-standards.md` | "No Ambiguity" philosophy |
|
|
118
|
+
| `unit-testing.md` | "Test Behavior, Not Implementation" |
|
|
119
|
+
| `integration-testing.md` | "Verify the Handshake" |
|
|
120
|
+
| `e2e-testing.md` | "Simulate the Real User" |
|
|
121
|
+
| `security-testing.md` | "Trust No Input" |
|
|
122
|
+
| `performance-testing.md` | "Performance is a Feature" |
|
|
123
|
+
| `security-audit.md` | Insecure defaults detection (Trail of Bits) |
|
|
124
|
+
| `sharp-edges.md` | API footgun analysis (Trail of Bits) |
|
|
125
|
+
| `property-based-testing.md` | PBT methodology (Trail of Bits) |
|
|
126
|
+
| `supply-chain-audit.md` | Dependency risk scoring (Trail of Bits) |
|
|
127
|
+
| `static-analysis.md` | Semgrep scanning workflow (Trail of Bits) |
|
|
132
128
|
|
|
133
129
|
## Related Skills
|
|
134
130
|
|
|
135
|
-
- [[frontend-developer]]
|
|
136
|
-
- [[backend-developer]]
|
|
137
|
-
- [[code-review]]
|
|
138
|
-
- [[project-manager]]
|
|
131
|
+
- [[frontend-developer]] ??Component testing
|
|
132
|
+
- [[backend-developer]] ??API testing
|
|
133
|
+
- [[code-review]] ??Security-focused PR review
|
|
134
|
+
- [[project-manager]] ??Quality metrics, UAT
|
|
139
135
|
|
|
140
136
|
---
|
|
141
137
|
|
package/cli/index.js
CHANGED
|
@@ -14,7 +14,7 @@ const fs = require('fs');
|
|
|
14
14
|
const path = require('path');
|
|
15
15
|
|
|
16
16
|
// ─── Constants ───────────────────────────────────────────────────────
|
|
17
|
-
const VERSION = '0.2.
|
|
17
|
+
const VERSION = '0.2.2';
|
|
18
18
|
const KIT_NAME = '@jhm1909/ag-kit';
|
|
19
19
|
const AGENT_DIR = '.agent';
|
|
20
20
|
|
package/package.json
CHANGED
/package/.agent/skills/code-review/references/{differential_review.md → differential-review.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
/package/.agent/skills/mcp-builder/references/{mcp_best_practices.md → mcp-best-practices.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
/package/.agent/skills/project-manager/references/{discovery_process.md → discovery-process.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
/package/.agent/skills/qa-tester/references/{accessibility_testing.md → accessibility-testing.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
/package/.agent/skills/qa-tester/references/automation/{best_practices.md → best-practices.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
/package/.agent/skills/qa-tester/references/{integration_testing.md → integration-testing.md}
RENAMED
|
File without changes
|
/package/.agent/skills/qa-tester/references/{performance_testing.md → performance-testing.md}
RENAMED
|
File without changes
|
/package/.agent/skills/qa-tester/references/{property_based_testing.md → property-based-testing.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
/package/.agent/skills/qa-tester/references/{test_case_standards.md → test-case-standards.md}
RENAMED
|
File without changes
|
/package/.agent/skills/qa-tester/references/{test_report_template.md → test-report-template.md}
RENAMED
|
File without changes
|
|
File without changes
|
|
File without changes
|