@jhm1909/ag-kit 0.2.1 → 0.2.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. package/.agent/skills/code-review/SKILL.md +30 -35
  2. package/.agent/skills/designer/SKILL.md +14 -14
  3. package/.agent/skills/frontend-developer/SKILL.md +2 -2
  4. package/.agent/skills/mcp-builder/SKILL.md +18 -18
  5. package/.agent/skills/mcp-builder/references/evaluation.md +1 -1
  6. package/.agent/skills/project-manager/SKILL.md +23 -28
  7. package/.agent/skills/qa-tester/SKILL.md +42 -46
  8. package/cli/index.js +1 -1
  9. package/package.json +1 -1
  10. /package/.agent/skills/code-review/references/{differential_review.md → differential-review.md} +0 -0
  11. /package/.agent/skills/code-review/references/{spec_compliance.md → spec-compliance.md} +0 -0
  12. /package/.agent/skills/designer/references/{frontend_design_aesthetics.md → frontend-design-aesthetics.md} +0 -0
  13. /package/.agent/skills/frontend-developer/references/{composition_patterns.md → composition-patterns.md} +0 -0
  14. /package/.agent/skills/frontend-developer/references/{react_performance_rules.md → react-performance-rules.md} +0 -0
  15. /package/.agent/skills/mcp-builder/references/{mcp_best_practices.md → mcp-best-practices.md} +0 -0
  16. /package/.agent/skills/mcp-builder/references/{node_mcp_server.md → node-mcp-server.md} +0 -0
  17. /package/.agent/skills/mcp-builder/references/{python_mcp_server.md → python-mcp-server.md} +0 -0
  18. /package/.agent/skills/project-manager/references/{discovery_process.md → discovery-process.md} +0 -0
  19. /package/.agent/skills/project-manager/references/{jobs_to_be_done.md → jobs-to-be-done.md} +0 -0
  20. /package/.agent/skills/project-manager/references/{prd_development.md → prd-development.md} +0 -0
  21. /package/.agent/skills/qa-tester/references/{accessibility_testing.md → accessibility-testing.md} +0 -0
  22. /package/.agent/skills/qa-tester/references/{agent_browser.md → agent-browser.md} +0 -0
  23. /package/.agent/skills/qa-tester/references/automation/{api_testing.md → api-testing.md} +0 -0
  24. /package/.agent/skills/qa-tester/references/automation/{best_practices.md → best-practices.md} +0 -0
  25. /package/.agent/skills/qa-tester/references/automation/{jest_vitest.md → jest-vitest.md} +0 -0
  26. /package/.agent/skills/qa-tester/references/{e2e_testing.md → e2e-testing.md} +0 -0
  27. /package/.agent/skills/qa-tester/references/{integration_testing.md → integration-testing.md} +0 -0
  28. /package/.agent/skills/qa-tester/references/{performance_testing.md → performance-testing.md} +0 -0
  29. /package/.agent/skills/qa-tester/references/{property_based_testing.md → property-based-testing.md} +0 -0
  30. /package/.agent/skills/qa-tester/references/{security_audit.md → security-audit.md} +0 -0
  31. /package/.agent/skills/qa-tester/references/{security_testing.md → security-testing.md} +0 -0
  32. /package/.agent/skills/qa-tester/references/{sharp_edges.md → sharp-edges.md} +0 -0
  33. /package/.agent/skills/qa-tester/references/{static_analysis.md → static-analysis.md} +0 -0
  34. /package/.agent/skills/qa-tester/references/{supply_chain_audit.md → supply-chain-audit.md} +0 -0
  35. /package/.agent/skills/qa-tester/references/{test_case_standards.md → test-case-standards.md} +0 -0
  36. /package/.agent/skills/qa-tester/references/{test_report_template.md → test-report-template.md} +0 -0
  37. /package/.agent/skills/qa-tester/references/{unit_testing.md → unit-testing.md} +0 -0
  38. /package/.agent/skills/qa-tester/references/{visual_testing.md → visual-testing.md} +0 -0
@@ -16,9 +16,9 @@ Guide proper code review practices: technical rigor, evidence-based claims, secu
16
16
 
17
17
  ## Three Practices
18
18
 
19
- 1. **Receiving feedback** Technical evaluation over performative agreement
20
- 2. **Requesting reviews** Systematic review process
21
- 3. **Verification gates** Evidence before any completion claims
19
+ 1. **Receiving feedback** ??Technical evaluation over performative agreement
20
+ 2. **Requesting reviews** ??Systematic review process
21
+ 3. **Verification gates** ??Evidence before any completion claims
22
22
 
23
23
  ## Core Principle
24
24
 
@@ -28,36 +28,31 @@ Guide proper code review practices: technical rigor, evidence-based claims, secu
28
28
 
29
29
  ```
30
30
  SITUATION?
31
-
32
- ├─ Received feedback
33
- │ ├─ Unclear items? → STOP, ask for clarification first
34
- │ ├─ From human partner? Understand, then implement
35
- │ └─ From external reviewer? → Verify technically before implementing
36
-
37
- ├─ Security-focused PR review?
38
- │ └─ Read: differential_review.md (blast radius, risk classification)
39
-
40
- ├─ Spec-to-code compliance check?
41
- │ └─ Read: spec_compliance.md (6-phase audit methodology)
42
-
43
- ├─ Completed work
44
- │ └─ Major feature/task? → Run verification, present evidence
45
-
46
- └─ About to claim status
47
- ├─ Have fresh verification? → State claim WITH evidence
48
- └─ No fresh verification? → RUN verification command first
31
+ ???��? Received feedback
32
+ ?? ?��? Unclear items? ??STOP, ask for clarification first
33
+ ?? ?��? From human partner? ??Understand, then implement
34
+ ?? ?��? From external reviewer? ??Verify technically before implementing
35
+ ???��? Security-focused PR review?
36
+ ?? ?��? Read: differential-review.md (blast radius, risk classification)
37
+ ???��? Spec-to-code compliance check?
38
+ ?? ?��? Read: spec-compliance.md (6-phase audit methodology)
39
+ ???��? Completed work
40
+ ?? ?��? Major feature/task? ??Run verification, present evidence
41
+ ???��? About to claim status
42
+ ?��? Have fresh verification? ??State claim WITH evidence
43
+ ?��? No fresh verification? ??RUN verification command first
49
44
  ```
50
45
 
51
46
  ## Receiving Feedback Protocol
52
47
 
53
- **Pattern**: READ UNDERSTAND VERIFY EVALUATE RESPOND IMPLEMENT
48
+ **Pattern**: READ ??UNDERSTAND ??VERIFY ??EVALUATE ??RESPOND ??IMPLEMENT
54
49
 
55
50
  **Key Rules**:
56
- - No performative agreement: "You're absolutely right!", "Great point!"
57
- - No implementation before verification
58
- - Restate requirement, ask questions, push back with technical reasoning
59
- - If unclear: STOP and ask for clarification on ALL unclear items first
60
- - YAGNI check: grep for usage before implementing suggested features
51
+ - ??No performative agreement: "You're absolutely right!", "Great point!"
52
+ - ??No implementation before verification
53
+ - ??Restate requirement, ask questions, push back with technical reasoning
54
+ - ??If unclear: STOP and ask for clarification on ALL unclear items first
55
+ - ??YAGNI check: grep for usage before implementing suggested features
61
56
 
62
57
  **Full protocol**: [code-review-reception.md](./references/code-review-reception.md)
63
58
 
@@ -72,14 +67,14 @@ SITUATION?
72
67
  | Bug fixed | Original symptom passes | "Code changed" |
73
68
  | Requirements met | Line-by-line checklist | "Tests passing" |
74
69
 
75
- **Red Flags STOP**:
70
+ **Red Flags ??STOP**:
76
71
  - Using "should", "probably", "seems to"
77
72
  - Expressing satisfaction before verification
78
73
  - Committing without verification
79
74
 
80
75
  **Full protocol**: [verification-before-completion.md](./references/verification-before-completion.md)
81
76
 
82
- ## Security Review Risk Classification
77
+ ## Security Review ??Risk Classification
83
78
 
84
79
  | Risk Level | Triggers |
85
80
  |------------|----------|
@@ -93,7 +88,7 @@ SITUATION?
93
88
  - Validation removed without replacement
94
89
  - High blast radius (50+ callers) + HIGH risk change
95
90
 
96
- **Full methodology**: [differential_review.md](./references/differential_review.md)
91
+ **Full methodology**: [differential-review.md](./references/differential-review.md)
97
92
 
98
93
  ## References
99
94
 
@@ -102,12 +97,12 @@ SITUATION?
102
97
  | `code-review-reception.md` | Receiving feedback protocol |
103
98
  | `verification-before-completion.md` | Iron Law verification gates |
104
99
  | `requesting-code-review.md` | How to request reviews |
105
- | `differential_review.md` | Security PR review (Trail of Bits) |
106
- | `spec_compliance.md` | Spec-to-code audit (Trail of Bits) |
100
+ | `differential-review.md` | Security PR review (Trail of Bits) |
101
+ | `spec-compliance.md` | Spec-to-code audit (Trail of Bits) |
107
102
 
108
103
  ## Bottom Line
109
104
 
110
- 1. Technical rigor over social performance No performative agreement
111
- 2. Evidence before claims Verification gates always
112
- 3. Security before speed Risk-classify every PR change
105
+ 1. Technical rigor over social performance ??No performative agreement
106
+ 2. Evidence before claims ??Verification gates always
107
+ 3. Security before speed ??Risk-classify every PR change
113
108
  4. Verify. Question. Then implement. Evidence. Then claim.
@@ -13,7 +13,7 @@ metadata:
13
13
  estimated_tokens: 15000
14
14
  ---
15
15
 
16
- # Designer Design Intelligence
16
+ # Designer ??Design Intelligence
17
17
 
18
18
  Expert design guidance powered by a **searchable design database** with BM25 ranking.
19
19
 
@@ -73,10 +73,10 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
73
73
  ### Workflow
74
74
 
75
75
  ```
76
- 1. ANALYZE requirements product type, audience, style keywords
77
- 2. SEARCH --design-system get full recommendation
78
- 3. DEEP-DIVE --domain supplement specific needs
79
- 4. IMPLEMENT using verified, data-driven choices
76
+ 1. ANALYZE requirements ??product type, audience, style keywords
77
+ 2. SEARCH --design-system ??get full recommendation
78
+ 3. DEEP-DIVE --domain ??supplement specific needs
79
+ 4. IMPLEMENT ??using verified, data-driven choices
80
80
  ```
81
81
 
82
82
  ---
@@ -93,7 +93,7 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
93
93
  | 6 | Typography & Color | MEDIUM | Base 16px, line-height 1.5, semantic tokens |
94
94
  | 7 | Animation | MEDIUM | 150-300ms, transform/opacity only, reduced-motion |
95
95
  | 8 | Forms & Feedback | MEDIUM | Visible labels, error near field, progressive disclosure |
96
- | 9 | Navigation | HIGH | Bottom nav ≤5, predictable back, deep linking |
96
+ | 9 | Navigation | HIGH | Bottom nav ??, predictable back, deep linking |
97
97
  | 10 | Charts & Data | LOW | Legends, tooltips, accessible colors |
98
98
 
99
99
  ---
@@ -101,14 +101,14 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
101
101
  ## Core Principles
102
102
 
103
103
  ### Intentionality Over Trends
104
- - **Why this color?** Brand meaning, accessibility, contrast
105
- - **Why this font?** Readability, personality, performance
106
- - **Why this animation?** User feedback, spatial understanding
104
+ - **Why this color?** ??Brand meaning, accessibility, contrast
105
+ - **Why this font?** ??Readability, personality, performance
106
+ - **Why this animation?** ??User feedback, spatial understanding
107
107
 
108
108
  ### Distinctive Over Generic (Anti-AI-Slop)
109
- - Default gradients, Inter everywhere, card templates
110
- - Committed aesthetic, unique typography, contextual layouts
111
- - 📖 Load [Frontend Design Aesthetics](./references/frontend_design_aesthetics.md) for Anthropic's anti-AI-slop guide
109
+ - ??Default gradients, Inter everywhere, card templates
110
+ - ??Committed aesthetic, unique typography, contextual layouts
111
+ - ?�� Load [Frontend Design Aesthetics](./references/frontend-design-aesthetics.md) for Anthropic's anti-AI-slop guide
112
112
 
113
113
  ### Technical Excellence
114
114
  - Semantic HTML first
@@ -127,12 +127,12 @@ python3 skills/designer/scripts/ui-search/search.py "<keyword>" --domain <domain
127
127
 
128
128
  ### Interaction
129
129
  - [ ] All tappable elements have press feedback
130
- - [ ] Touch targets ≥44×44pt
130
+ - [ ] Touch targets ??4×44pt
131
131
  - [ ] Micro-interactions 150-300ms
132
132
  - [ ] Disabled states visually clear
133
133
 
134
134
  ### Light/Dark Mode
135
- - [ ] Primary text contrast ≥4.5:1 in both modes
135
+ - [ ] Primary text contrast ??.5:1 in both modes
136
136
  - [ ] Dividers/borders visible in both modes
137
137
  - [ ] Both themes tested before delivery
138
138
 
@@ -109,8 +109,8 @@ User: "Add a 3D model viewer to my React app"
109
109
 
110
110
  | Reference | Purpose |
111
111
  |:----------|:--------|
112
- | `react_performance_rules.md` | 65 Vercel React/Next.js perf rules (8 categories) |
113
- | `composition_patterns.md` | React composition patterns (Vercel) |
112
+ | `react-performance-rules.md` | 65 Vercel React/Next.js perf rules (8 categories) |
113
+ | `composition-patterns.md` | React composition patterns (Vercel) |
114
114
 
115
115
  ## Related Skills
116
116
 
@@ -1,6 +1,6 @@
1
1
  ---
2
2
  name: mcp-builder
3
- description: Guide for creating production-grade MCP (Model Context Protocol) servers. Use when building MCP servers to integrate external APIs, databases, or services whether in TypeScript (MCP SDK) or Python (FastMCP). Covers architecture, tool design, security, evaluation, and best practices.
3
+ description: Guide for creating production-grade MCP (Model Context Protocol) servers. Use when building MCP servers to integrate external APIs, databases, or services ??whether in TypeScript (MCP SDK) or Python (FastMCP). Covers architecture, tool design, security, evaluation, and best practices.
4
4
  ---
5
5
 
6
6
  # MCP Server Development Guide
@@ -11,7 +11,7 @@ description: Guide for creating production-grade MCP (Model Context Protocol) se
11
11
 
12
12
  Create MCP servers that enable LLMs to interact with external services through well-designed tools. Quality is measured by how well it enables LLMs to accomplish real-world tasks.
13
13
 
14
- ## 🚀 High-Level Workflow
14
+ ## ?? High-Level Workflow
15
15
 
16
16
  ### Phase 1: Deep Research and Planning
17
17
 
@@ -24,9 +24,9 @@ Create MCP servers that enable LLMs to interact with external services through w
24
24
  2. **Study Framework Documentation**
25
25
  - **Recommended stack**: TypeScript (best SDK support + AI compatibility)
26
26
  - **Transport**: Streamable HTTP for remote, stdio for local
27
- - Load: [📋 MCP Best Practices](./references/mcp_best_practices.md)
28
- - Load: [TypeScript Guide](./references/node_mcp_server.md)
29
- - Load: [🐍 Python Guide](./references/python_mcp_server.md)
27
+ - Load: [?�� MCP Best Practices](./references/mcp_best-practices.md)
28
+ - Load: [??TypeScript Guide](./references/node-mcp-server.md)
29
+ - Load: [?�� Python Guide](./references/python-mcp-server.md)
30
30
 
31
31
  3. **Plan Implementation**
32
32
  - Review the service's API documentation
@@ -35,8 +35,8 @@ Create MCP servers that enable LLMs to interact with external services through w
35
35
 
36
36
  ### Phase 2: Implementation
37
37
 
38
- 1. **Project Structure** see language-specific guides
39
- 2. **Core Infrastructure** API client, error handling, pagination, response formatting
38
+ 1. **Project Structure** ??see language-specific guides
39
+ 2. **Core Infrastructure** ??API client, error handling, pagination, response formatting
40
40
  3. **Tool Implementation**:
41
41
  - Input Schema: Zod (TS) or Pydantic (Python) with constraints
42
42
  - Output Schema: Define `outputSchema` where possible
@@ -51,24 +51,24 @@ Create MCP servers that enable LLMs to interact with external services through w
51
51
 
52
52
  ### Phase 4: Create Evaluations
53
53
 
54
- Load [Evaluation Guide](./references/evaluation.md) for complete guidelines.
54
+ Load [??Evaluation Guide](./references/evaluation.md) for complete guidelines.
55
55
 
56
56
  Create 10 evaluation questions that are:
57
- - **Independent** not dependent on other questions
58
- - **Read-only** non-destructive operations only
59
- - **Complex** requiring multiple tool calls
60
- - **Realistic** based on real use cases
61
- - **Verifiable** single, clear answer
62
- - **Stable** answer won't change over time
57
+ - **Independent** ??not dependent on other questions
58
+ - **Read-only** ??non-destructive operations only
59
+ - **Complex** ??requiring multiple tool calls
60
+ - **Realistic** ??based on real use cases
61
+ - **Verifiable** ??single, clear answer
62
+ - **Stable** ??answer won't change over time
63
63
 
64
64
  ## Reference Files
65
65
 
66
66
  | File | When to Load |
67
67
  |------|-------------|
68
- | [mcp_best_practices.md](./references/mcp_best_practices.md) | Always naming, security, pagination, transport |
69
- | [node_mcp_server.md](./references/node_mcp_server.md) | TypeScript/Node implementation |
70
- | [python_mcp_server.md](./references/python_mcp_server.md) | Python/FastMCP implementation |
71
- | [evaluation.md](./references/evaluation.md) | Phase 4 creating quality evaluations |
68
+ | [mcp_best-practices.md](./references/mcp_best-practices.md) | Always ??naming, security, pagination, transport |
69
+ | [node-mcp-server.md](./references/node-mcp-server.md) | TypeScript/Node implementation |
70
+ | [python-mcp-server.md](./references/python-mcp-server.md) | Python/FastMCP implementation |
71
+ | [evaluation.md](./references/evaluation.md) | Phase 4 ??creating quality evaluations |
72
72
 
73
73
  ## Knowledge Graph
74
74
 
@@ -511,7 +511,7 @@ The evaluation script generates a detailed report including:
511
511
  - **Per-Task Results**:
512
512
  - Prompt and expected response
513
513
  - Actual response from the agent
514
- - Whether the answer was correct (✅/❌)
514
+ - Whether the answer was correct (????
515
515
  - Duration and tool call details
516
516
  - Agent's summary of its approach
517
517
  - Agent's feedback on the tools
@@ -30,30 +30,25 @@ Deliver value through efficient systems and clear processes.
30
30
 
31
31
  ## Core Philosophy
32
32
 
33
- 1. **Outcome & Efficiency** Value (Product) through efficient systems (Process)
34
- 2. **Voice of User & Team** Represent user in requirements, team in process
35
- 3. **Ruthless Prioritization** "No" protects focus
36
- 4. **Automated Governance** Automate rules, don't just follow them
33
+ 1. **Outcome & Efficiency** ??Value (Product) through efficient systems (Process)
34
+ 2. **Voice of User & Team** ??Represent user in requirements, team in process
35
+ 3. **Ruthless Prioritization** ??"No" protects focus
36
+ 4. **Automated Governance** ??Automate rules, don't just follow them
37
37
 
38
38
  ## Decision Tree
39
39
 
40
40
  ```
41
41
  What PM activity is needed?
42
-
43
- ├─ Discovery / Research?
44
- │ └─ Read: discovery_process.md (6-phase workflow)
45
-
46
- ├─ PRD / Requirements?
47
- │ └─ Read: prd_development.md (10-section template)
48
-
49
- ├─ Understanding customer needs?
50
- │ └─ Read: jobs_to_be_done.md (JTBD framework)
51
-
52
- ├─ Strategic planning?
53
- │ └─ Use: strategic-frameworks (Roadmap, OKRs)
54
-
55
- └─ Process / Governance?
56
- └─ Use: rules-guide, workflows-guide
42
+ ???��? Discovery / Research?
43
+ ?? ?��? Read: discovery-process.md (6-phase workflow)
44
+ ???��? PRD / Requirements?
45
+ ?? ?��? Read: prd-development.md (10-section template)
46
+ ???��? Understanding customer needs?
47
+ ?? ?��? Read: jobs-to-be-done.md (JTBD framework)
48
+ ???��? Strategic planning?
49
+ ?? ?��? Use: strategic-frameworks (Roadmap, OKRs)
50
+ ???��? Process / Governance?
51
+ ?��? Use: rules-guide, workflows-guide
57
52
  ```
58
53
 
59
54
  ## Capabilities
@@ -69,9 +64,9 @@ What PM activity is needed?
69
64
 
70
65
  ## Quick Rules
71
66
 
72
- - **Repeated 3x?** Make a **Workflow** (`.agent/workflows/`)
73
- - **Mistake 2x?** Make a **Rule** (`.agent/rules/`)
74
- - **Domain-specific?** Consult **[[business-analysis]]**
67
+ - **Repeated 3x?** ??Make a **Workflow** (`.agent/workflows/`)
68
+ - **Mistake 2x?** ??Make a **Rule** (`.agent/rules/`)
69
+ - **Domain-specific?** ??Consult **[[business-analysis]]**
75
70
 
76
71
  ## Skill Detection Matrix
77
72
 
@@ -95,15 +90,15 @@ What PM activity is needed?
95
90
  | `templates/rfc.md` | Request for Comments |
96
91
  | `templates/prd-template.md` | Product Requirements |
97
92
  | `templates/user-story-template.md` | User stories |
98
- | `discovery_process.md` | Product discovery 6-phase workflow (Dean Peters) |
99
- | `prd_development.md` | Structured PRD creation guide (Dean Peters) |
100
- | `jobs_to_be_done.md` | JTBD framework (Dean Peters) |
93
+ | `discovery-process.md` | Product discovery 6-phase workflow (Dean Peters) |
94
+ | `prd-development.md` | Structured PRD creation guide (Dean Peters) |
95
+ | `jobs-to-be-done.md` | JTBD framework (Dean Peters) |
101
96
 
102
97
  ## Related Skills
103
98
 
104
- - [[business-analysis]] Deep requirements analysis
105
- - [[qa-tester]] Quality and testing
106
- - [[lead-architect]] High-level technical decisions
99
+ - [[business-analysis]] ??Deep requirements analysis
100
+ - [[qa-tester]] ??Quality and testing
101
+ - [[lead-architect]] ??High-level technical decisions
107
102
 
108
103
  ---
109
104
 
@@ -30,31 +30,27 @@ Comprehensive testing + security auditing for high-quality software delivery.
30
30
 
31
31
  ## Core Philosophy
32
32
 
33
- 1. **Docs First** Base all testing on `docs/` folder requirements
34
- 2. **No Assumptions** Missing docs? STOP and CONFIRM with user
35
- 3. **Verify Everything** Happy path, negative path, boundaries, edges
36
- 4. **Trust No Input** Every input is a potential attack vector
37
- 5. **Pit of Success** Secure usage should be the path of least resistance
33
+ 1. **Docs First** ??Base all testing on `docs/` folder requirements
34
+ 2. **No Assumptions** ??Missing docs? STOP and CONFIRM with user
35
+ 3. **Verify Everything** ??Happy path, negative path, boundaries, edges
36
+ 4. **Trust No Input** ??Every input is a potential attack vector
37
+ 5. **Pit of Success** ??Secure usage should be the path of least resistance
38
38
 
39
39
  ## Decision Tree
40
40
 
41
41
  ```
42
42
  What testing is needed?
43
-
44
- ├─ Functional testing?
45
- │ └─ Read: test_case_standards.md, unit_testing.md, e2e_testing.md
46
-
47
- ├─ Security audit?
48
- │ ├─ Insecure defaults/hardcoded secrets? Read: security_audit.md
49
- │ ├─ API footgun analysis? Read: sharp_edges.md
50
- │ ├─ Dependency risk? → Read: supply_chain_audit.md
51
- │ └─ Static analysis scan? → Read: static_analysis.md
52
-
53
- ├─ Property-based testing?
54
- │ └─ Read: property_based_testing.md
55
-
56
- └─ Performance testing?
57
- └─ Read: performance_testing.md
43
+ ???��? Functional testing?
44
+ ?? ?��? Read: test-case-standards.md, unit-testing.md, e2e-testing.md
45
+ ???��? Security audit?
46
+ ?? ?��? Insecure defaults/hardcoded secrets? ??Read: security-audit.md
47
+ ?? ?��? API footgun analysis? ??Read: sharp-edges.md
48
+ ?? ?��? Dependency risk? ??Read: supply-chain-audit.md
49
+ ?? ?��? Static analysis scan? ??Read: static-analysis.md
50
+ ???��? Property-based testing?
51
+ ?? ?��? Read: property-based-testing.md
52
+ ???��? Performance testing?
53
+ ?��? Read: performance-testing.md
58
54
  ```
59
55
 
60
56
  ## Test Types
@@ -75,15 +71,15 @@ What testing is needed?
75
71
 
76
72
  ### Noun-Verb Extraction
77
73
  Scan docs for **Nouns** (User, Order) and **Verbs** (Register, Checkout)
78
- Each Action = At least 1 Test Case
74
+ ??Each Action = At least 1 Test Case
79
75
 
80
76
  ### Keyword Permutations
81
77
  Look for "MUST", "CANNOT", "ONLY IF"
82
- Test constraint met AND violated
78
+ ??Test constraint met AND violated
83
79
 
84
80
  ### State Transition Mapping
85
- Entity states (Pending Paid Shipped)
86
- Test valid AND invalid transitions
81
+ Entity states (Pending ??Paid ??Shipped)
82
+ ??Test valid AND invalid transitions
87
83
 
88
84
  ### Property Detection (PBT)
89
85
  | Pattern | Property | Priority |
@@ -97,7 +93,7 @@ Entity states (Pending → Paid → Shipped)
97
93
 
98
94
  When auditing code security, check:
99
95
 
100
- - [ ] **Insecure defaults**: `env.get(X) or 'fallback'` fail-open patterns
96
+ - [ ] **Insecure defaults**: `env.get(X) or 'fallback'` ??fail-open patterns
101
97
  - [ ] **Hardcoded secrets**: `password = "..."`, `API_KEY = "..."`
102
98
  - [ ] **Weak crypto**: MD5, SHA1, DES, RC4, ECB in security contexts
103
99
  - [ ] **Permissive CORS**: `Access-Control-Allow-Origin: *`
@@ -107,35 +103,35 @@ When auditing code security, check:
107
103
 
108
104
  ## Coverage Requirements
109
105
 
110
- - ✅ **Happy Path** Golden flow
111
- - ✅ **Negative Path** Error handling
112
- - ✅ **Boundary** Off-by-one (0, 1, Max)
113
- - ✅ **Edge Cases** Timeouts, failures, concurrency
114
- - ✅ **Integration** Cross-module flows
115
- - ✅ **Security** Injection, auth bypass, data leaks
106
+ - ??**Happy Path** ??Golden flow
107
+ - ??**Negative Path** ??Error handling
108
+ - ??**Boundary** ??Off-by-one (0, 1, Max)
109
+ - ??**Edge Cases** ??Timeouts, failures, concurrency
110
+ - ??**Integration** ??Cross-module flows
111
+ - ??**Security** ??Injection, auth bypass, data leaks
116
112
 
117
113
  ## References
118
114
 
119
115
  | Reference | Purpose |
120
116
  |:----------|:--------|
121
- | `test_case_standards.md` | "No Ambiguity" philosophy |
122
- | `unit_testing.md` | "Test Behavior, Not Implementation" |
123
- | `integration_testing.md` | "Verify the Handshake" |
124
- | `e2e_testing.md` | "Simulate the Real User" |
125
- | `security_testing.md` | "Trust No Input" |
126
- | `performance_testing.md` | "Performance is a Feature" |
127
- | `security_audit.md` | Insecure defaults detection (Trail of Bits) |
128
- | `sharp_edges.md` | API footgun analysis (Trail of Bits) |
129
- | `property_based_testing.md` | PBT methodology (Trail of Bits) |
130
- | `supply_chain_audit.md` | Dependency risk scoring (Trail of Bits) |
131
- | `static_analysis.md` | Semgrep scanning workflow (Trail of Bits) |
117
+ | `test-case-standards.md` | "No Ambiguity" philosophy |
118
+ | `unit-testing.md` | "Test Behavior, Not Implementation" |
119
+ | `integration-testing.md` | "Verify the Handshake" |
120
+ | `e2e-testing.md` | "Simulate the Real User" |
121
+ | `security-testing.md` | "Trust No Input" |
122
+ | `performance-testing.md` | "Performance is a Feature" |
123
+ | `security-audit.md` | Insecure defaults detection (Trail of Bits) |
124
+ | `sharp-edges.md` | API footgun analysis (Trail of Bits) |
125
+ | `property-based-testing.md` | PBT methodology (Trail of Bits) |
126
+ | `supply-chain-audit.md` | Dependency risk scoring (Trail of Bits) |
127
+ | `static-analysis.md` | Semgrep scanning workflow (Trail of Bits) |
132
128
 
133
129
  ## Related Skills
134
130
 
135
- - [[frontend-developer]] Component testing
136
- - [[backend-developer]] API testing
137
- - [[code-review]] Security-focused PR review
138
- - [[project-manager]] Quality metrics, UAT
131
+ - [[frontend-developer]] ??Component testing
132
+ - [[backend-developer]] ??API testing
133
+ - [[code-review]] ??Security-focused PR review
134
+ - [[project-manager]] ??Quality metrics, UAT
139
135
 
140
136
  ---
141
137
 
package/cli/index.js CHANGED
@@ -14,7 +14,7 @@ const fs = require('fs');
14
14
  const path = require('path');
15
15
 
16
16
  // ─── Constants ───────────────────────────────────────────────────────
17
- const VERSION = '0.2.1';
17
+ const VERSION = '0.2.2';
18
18
  const KIT_NAME = '@jhm1909/ag-kit';
19
19
  const AGENT_DIR = '.agent';
20
20
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@jhm1909/ag-kit",
3
- "version": "0.2.1",
3
+ "version": "0.2.2",
4
4
  "description": "AI Agent Kit — 21 skills, 15 workflows, manifest-driven routing for AI-powered coding",
5
5
  "main": "cli/index.js",
6
6
  "bin": {