@mmerterden/multi-agent-pipeline 12.5.0 → 12.7.0

package/pipeline/skills/shared/core/multi-agent-sync/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: multi-agent-sync
 language: en
-description: "One-shot sync of the entire multi-agent ecosystem: Claude Code, Copilot CLI, pipeline repo, and website."
+description: "One-shot sync of the entire multi-agent ecosystem: Claude Code, Copilot CLI, pipeline repo, website, and the dev-toolkit MCP server. Use when work is finished and should be propagated across Claude Code, Copilot CLI, the repos, the website and the dev-toolkit server."
 user-invocable: true
-argument-hint: 'release | "change description"'
+argument-hint: 'release | dev-toolkit | "change description"'
 ---
 
 # Multi-Agent Sync
@@ -22,6 +22,7 @@ When invoked, it synchronizes all targets in order. It detects what changed, upd
 | 2 | Copilot CLI | `~/.copilot/copilot-instructions.md` + `~/.copilot/skills/` | <- from Claude |
 | 3 | multi-agent-pipeline repo | `~/multi-agent-pipeline/pipeline/` | <- from Claude (genericized) |
 | 4 | Website | `{owner}/{website-host}` | <- version + features |
+| 5 | dev-toolkit MCP server | resolved from `prefs.global.devToolkit` or the `mcpServers` registration | own repo: gate, commit, publish |
 
 ## Default Behavior (no argument)
 
@@ -29,11 +30,12 @@ Run all steps automatically:
 
 ```
 Step 1: DETECT      Compare timestamps, find stale targets
-Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 41 sub-command skills)
+Step 2: COPILOT     Claude Code -> Copilot CLI (instructions + 42 sub-command skills)
 Step 3: REPO        Claude Code -> pipeline repo (genericized, personal data scrub)
+Step 3d: DEV-TOOLKIT Companion MCP server -> detect movement, ship gates, commit + publish
 Step 4: WEBSITE     Version + phase/model counts -> {website-host} (i18n + projects.ts)
 Step 5: Commit      Commit + push all changed repos
-Step 6: Report      Summary: synced targets, changed files, deploy status
+Step 6: Report      Summary: synced targets, changed files, deploy status, dev-toolkit version
 ```
 
 If nothing is stale -> report "All targets up to date" and stop.
@@ -44,6 +46,7 @@ If nothing is stale -> report "All targets up to date" and stop.
 |-------|----------|
 | (no argument) | Full ecosystem sync (default) |
 | `release` | Full sync + version bump + tag + npm publish + website deploy |
+| `dev-toolkit` | Run Step 3d only: gate, commit and publish the companion MCP server |
 | `"change description"` | Apply the description to ALL targets at once |
 
 
@@ -90,6 +93,43 @@ If nothing is stale -> report "All targets up to date" and stop.
    - `~/.claude/settings.json`
 
 
+## Dev-Toolkit Sync (Step 3d)
+
+The companion MCP server (`dev-toolkit-mcp`) is its own repo with its own registry. Pipeline skills call its tools and several declare a minimum version, so when it moves it has to ship.
+
+**Resolution**: identical to `multi-agent-refactor` Step 0c  -  `prefs.global.devToolkit` first, then the `mcpServers` registration, then skip.
+
+**Detect movement**: dirty working tree, unpushed commits, or no `v<version>` tag for the version in `package.json`. Nothing moved -> report "up to date" and continue.
+
+**Ship gates** (a failure aborts this step only, with file + line; the rest of the sync continues).
+When the toolkit ships its own gate script (`npm run gates` / `scripts/gates.sh`), run that instead of the list below - the repo owns the definition, this skill owns the requirement. The list is the fallback, and the coverage the script must have:
+
+1. `node --check index.js` plus every `tools/**/*.js`.
+2. stdio handshake (`initialize` -> `notifications/initialized` -> `tools/list`) must answer with a non-zero tool count.
+3. That count must match every advertised count (`package.json` description, README header and per-family rows). Fix the docs, never the gate.
+4. `npm pack --dry-run` must list every `tools/*/` directory the server loads  -  a missing `files[]` entry publishes a broken package.
+5. `grep -rn "console\.log(" index.js tools/` must be empty: stdout carries the JSON-RPC frames, diagnostics go to `console.error`.
+6. Personal-data scan: no absolute `/Users/<name>` paths, no tokens, no corporate hostnames.
+7. Version contract: every pipeline-side minimum version must be satisfied by what is about to ship; a new tool a pipeline skill now needs -> bump that minimum in the same sync.
+
+**Version bump**: patch for fixes and docs, minor for a new tool, major for a removed or renamed tool.
+
+**Ship**: commit with that repo's own convention, tag `v<version>`, push with `--tags`, then publish to the registry from `publishConfig` using a throwaway userconfig  -  never edit `~/.npmrc`, never a bare `npm publish`. The token depends on the registry: `npm.pkg.github.com` needs a GitHub PAT with `write:packages` (logical key `github`), `registry.npmjs.org` needs the `npm` key.
+
+```bash
+NPMRC=$(mktemp); trap 'rm -f "$NPMRC"' EXIT
+REG=$(node -p "require('./package.json').publishConfig?.registry || 'https://registry.npmjs.org'")
+HOST=${REG#https://}; HOST=${HOST%/}
+case "$HOST" in npm.pkg.github.com*) KEY=github ;; *) KEY=npm ;; esac
+TOKEN=$(bash "$HOME/.claude/lib/credential-store.sh" get "$KEY")
+[ -n "$TOKEN" ] || echo "ABORT: no '$KEY' token - onboard it via /multi-agent:setup before publishing"
+printf '%s\n' "registry=$REG" "//$HOST/:_authToken=$TOKEN" > "$NPMRC"
+npm publish --userconfig "$NPMRC"
+```
+
+**Approval**: outside autopilot and outside `release`, ask first: commit + push / commit + push + publish / skip. Never ship unapproved band-E work from `multi-agent-refactor` silently.
+
+
 ## Website Sync (Step 4)
 
 Propagate the pipeline version, phase count, model count, and feature descriptions to the website.
@@ -124,9 +164,10 @@ When invoked with the `release` argument:
 4. VERSION       package.json version bump (patch/minor/major)
 5. Commit + TAG  git commit + git tag v{VERSION}
 6. PUSH          git push --tags -> release.yml auto-publish
-7. WEBSITE       Version + features -> {website-host}
-8. COPILOT       Copilot CLI instructions + skills sync
-9. Report        Summary: version, touched repos, deploy status
+7. DEV-TOOLKIT   Ship the companion MCP server if it moved (Step 3d gates, then publish)
+8. WEBSITE       Version + features -> {website-host}
+9. COPILOT       Copilot CLI instructions + skills sync
+10. Report       Summary: version, touched repos, deploy status
 ```
 
 
@@ -136,10 +177,10 @@ When invoked with the `release` argument:
 |-------------|-------------|
 | `~/.claude/commands/multi-agent/{cmd}.md` | `~/.copilot/skills/multi-agent-{cmd}/SKILL.md` |
 
-**41 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
+**42 commands are synced** (canonical inventory  -  must match `cross-cli-contract.md` section 1; drift = contract violation):
 
 ```
-analysis, analysis-resolve, autopilot, build-optimize, channels, create-jira, dev,
+analysis, analysis-resolve, autopilot, build-optimize, channels, create-jira, design-check, dev,
 dev-autopilot, dev-local, dev-local-autopilot, diff-explain, finish, forget, garbage-collect,
 help, issue, jira, kill, language, local,
 local-autopilot, log, manual-test, prune-logs, purge, refactor, resume, review, review-issue, review-jira,
@@ -159,6 +200,7 @@ routines, save, scan, search, setup, stack, status, sync, test, uninstall, updat
 | `gh` CLI (personal) | `{owner}` gh auth (Keychain) |
 | `gh` CLI (work) | `${USER}_{work-gh-alias}` gh auth (Keychain) |
 | npm publish | `NODE_AUTH_TOKEN`  -  `GITHUB_TOKEN` in CI, Keychain PAT locally |
+| dev-toolkit publish (Step 3d) | `npm` logical Keychain key -> throwaway `--userconfig`, registry from that repo's `publishConfig` |
 
 ```bash
 gh auth switch --user {owner}  # for personal repos

package/pipeline/skills/shared/core/multi-agent-test/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-agent-test
 language: en
-description: "UI Bug Hunter  -  iOS Simulator (simctl) + Android Emulator (adb). Auto-detects platform. Screenshot + tap + analyze on the booted device. The Phase 5 Manual Test flow lives at multi-agent-manual-test."
+description: "UI Bug Hunter  -  iOS Simulator (simctl) + Android Emulator (adb). Auto-detects platform. Screenshot + tap + analyze on the booted device. The Phase 5 Manual Test flow lives at multi-agent-manual-test. Use when a running app should be driven on a simulator or emulator to hunt UI bugs."
 user-invocable: true
 argument-hint: '[scenario]  -  e.g. "dark mode" | "accessibility" | "dynamic type" | "screenshot tr" | "store-ready" | (empty = full sweep)'
 ---
@@ -39,6 +39,6 @@ Pass `$ARGUMENTS` through verbatim  -  the target doc picks the right test matri
 
 - **iOS**: Xcode + booted Simulator (`xcrun simctl list | grep Booted`)
 - **Android**: Android SDK + running emulator or USB device (`adb devices`)
-- **MCP**: `dev-toolkit` MCP server registered (tool names start with `mcp__dev_toolkit__*`)
+- **MCP**: `dev-toolkit` MCP server registered (tool names start with `mcp__dev-toolkit__*`)
 
 For the Phase 5 manual test mode (branch checkout + Xcode hint), use `multi-agent-manual-test` instead.

package/pipeline/skills/shared/core/multi-agent-uninstall/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-agent-uninstall
 language: en
-description: "Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline settings and logs. Asks for double confirmation."
+description: "Uninstall the pipeline from Claude Code + Copilot CLI. Keychain access tokens are always left untouched; --all-data also clears pipeline settings and logs. Asks for double confirmation. Use when the pipeline should be removed from Claude Code and Copilot CLI."
 user-invocable: true
 argument-hint: "[--dry-run] [--all-data] [--claude] [--copilot] [--target=<path>]"
 ---

package/pipeline/skills/shared/core/multi-agent-update/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: multi-agent-update
 language: en
-description: "Update the pipeline to the latest version: git pull, install, migrate."
+description: "Update the pipeline to the latest version: git pull, install, migrate. Use when the installed pipeline is behind and should be brought to the latest version."
 user-invocable: true
 argument-hint: ""
 ---

package/pipeline/skills/shared/external/accessibility-compliance-accessibility-audit/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: accessibility-compliance-accessibility-audit
-description: "You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance."
+description: "You are an accessibility expert specializing in WCAG compliance, inclusive design, and assistive technology compatibility. Conduct audits, identify barriers, and provide remediation guidance. Use when auditing a product against WCAG, or when a barrier needs diagnosing and remediating."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/agent-introspection-debugging/SKILL.md

@@ -22,7 +22,7 @@ changes the diagnosis, and report honestly  -  before retrying.
 - Tool calls keep erroring (connection refused, rate limit, stale state).
 - You are about to retry with no new hypothesis  -  the signal to stop and think.
 
-## Phase 1 — Capture
+## Phase 1 - Capture
 
 Write the failure state down before acting:
 
@@ -32,7 +32,7 @@ Write the failure state down before acting:
 - What is repeating (same error? different each time?).
 - Environment assumptions (cwd, branch, service up, auth present).
 
-## Phase 2 — Diagnose
+## Phase 2 - Diagnose
 
 Match the symptom to a cause before choosing an action:
 
@@ -45,7 +45,7 @@ Match the symptom to a cause before choosing an action:
 | Diff/state looks stale | cwd or branch drift | pwd, current branch |
 | Tests still failing after "fix" | wrong hypothesis | re-read the actual assertion |
 
-## Phase 3 — Contained recovery
+## Phase 3 - Contained recovery
 
 Take the single smallest action that changes the diagnosis surface  -  not a
 broad rewrite. Change one variable, re-observe. The goal is new information,
@@ -56,7 +56,7 @@ performing. "Reset agent state," "cleared the cache," "restarted the service"
 are real only if you did them through a real tool. Narrating an imaginary
 auto-heal is worse than reporting that you are blocked.
 
-## Phase 4 — Introspection report
+## Phase 4 - Introspection report
 
 Emit a short structured record:
 

package/pipeline/skills/shared/external/agentflow/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agentflow
-description: "Orchestrate autonomous AI development pipelines through your Kanban board (Asana, GitHub Projects, Linear). Manages multi-worker Claude Code dispatch, deterministic quality gates, adversarial review, per-task cost tracking, and crash-proof pipeline execution."
+description: "Orchestrate autonomous AI development pipelines through your Kanban board (Asana, GitHub Projects, Linear). Manages multi-worker Claude Code dispatch, deterministic quality gates, adversarial review, per-task cost tracking, and crash-proof pipeline execution. Use when development should be driven from a Kanban board rather than from a single prompt."
 risk: safe
 source: community
 date_added: "2026-04-02"

package/pipeline/skills/shared/external/android-jetpack-compose-expert/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: android-jetpack-compose-expert
-description: "Expert guidance for building modern Android UIs with Jetpack Compose, covering state management, navigation, performance, and Material Design 3."
+description: "Expert guidance for building modern Android UIs with Jetpack Compose, covering state management, navigation, performance, and Material Design 3. Use when building or reviewing Compose UI, state handling or navigation."
 risk: safe
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/android_ui_verification/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: android_ui_verification
-description: Automated end-to-end UI testing and verification on an Android Emulator using ADB.
+description: "Automated end-to-end UI testing and verification on an Android Emulator using ADB. Use when an Android build needs driving on an emulator to verify its UI end to end."
 risk: safe
 source: community
 date_added: "2026-02-28"

package/pipeline/skills/shared/external/api-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: api-patterns
-description: "API design principles and decision-making. REST vs GraphQL vs tRPC selection, response formats, versioning, pagination."
+description: "API design principles and decision-making. REST vs GraphQL vs tRPC selection, response formats, versioning, pagination. Use when choosing between REST, GraphQL and tRPC, or shaping response formats, versioning and pagination."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/api-security-best-practices/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: api-security-best-practices
-description: "Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities"
+description: "Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities. Use when designing or reviewing an API's authentication, authorization, input validation or rate limiting."
 risk: unknown
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/app-store-changelog/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: app-store-changelog
-description: Generate user-facing App Store release notes from git history since the last tag.
+description: "Generate user-facing App Store release notes from git history since the last tag. Use when release notes have to be written from the commits since the last tag."
 risk: safe
 source: "Dimillian/Skills (MIT)"
 date_added: "2026-03-25"

package/pipeline/skills/shared/external/backlog/BACKLOG.md

@@ -23,7 +23,7 @@ _(nothing yet)_
 ### Entry template
 
 ```
-#### <id> — <title>
+#### <id> - <title>
 - state: deferred | ready | in-progress | done
 - origin: <task / PR / finding / conversation that spawned it>
 - unblock: <condition that makes it actionable, or "none">

package/pipeline/skills/shared/external/backlog/SKILL.md

@@ -7,11 +7,11 @@ argument-hint: [list | add | pick <id> | done <id>]
 allowed-tools: Read, Grep, Glob, Edit, Write
 ---
 
-# backlog — deferred work, kept whole
+# backlog - deferred work, kept whole
 
-> **Layer:** workflow — the deterministic registry routine for deferred jobs.
-> **Bundled:** [BACKLOG.md](BACKLOG.md) — the registry. The heart of this skill.
-> **Iron rule:** moving a job onto this list is a MOVE, never a rewrite — the FULL spec
+> **Layer:** workflow - the deterministic registry routine for deferred jobs.
+> **Bundled:** [BACKLOG.md](BACKLOG.md) - the registry. The heart of this skill.
+> **Iron rule:** moving a job onto this list is a MOVE, never a rewrite - the FULL spec
 > travels verbatim. A compressed one-liner is a loss; the point of the backlog is that
 > deferring costs nothing later.
 
@@ -26,14 +26,14 @@ allowed-tools: Read, Grep, Glob, Edit, Write
 
 Every entry in `BACKLOG.md` carries, verbatim:
 
-- **id** — short stable slug (`kebab-case`), assigned on add.
-- **title** — one line.
-- **state** — `deferred` -> `ready` -> `in-progress` -> `done`. Entries only move forward; nothing is deleted.
-- **origin** — where it came from (the task/PR/finding/conversation that spawned it).
-- **spec** — the FULL description, verbatim from when it was deferred. Not a summary.
-- **unblock** — the condition that makes it actionable (a dependency, a decision, a date). `deferred` items without an unblock condition are just `ready`.
+- **id** - short stable slug (`kebab-case`), assigned on add.
+- **title** - one line.
+- **state** - `deferred` -> `ready` -> `in-progress` -> `done`. Entries only move forward; nothing is deleted.
+- **origin** - where it came from (the task/PR/finding/conversation that spawned it).
+- **spec** - the FULL description, verbatim from when it was deferred. Not a summary.
+- **unblock** - the condition that makes it actionable (a dependency, a decision, a date). `deferred` items without an unblock condition are just `ready`.
 
-Prefer an append-only markdown table or section list in `BACKLOG.md`; never overwrite an entry's spec on a state change — only its `state` line moves.
+Prefer an append-only markdown table or section list in `BACKLOG.md`; never overwrite an entry's spec on a state change - only its `state` line moves.
 
 ## Operations
 
@@ -46,4 +46,4 @@ Prefer an append-only markdown table or section list in `BACKLOG.md`; never over
 
 ## Why keep it whole
 
-The failure mode this skill prevents: an agent defers a job with a one-line note, the surrounding context evaporates, and picking it up later means re-deriving the spec (or silently dropping it). Storing the full spec at defer-time makes deferral safe — the cost of "later" is paid once, up front, not lost.
+The failure mode this skill prevents: an agent defers a job with a one-line note, the surrounding context evaporates, and picking it up later means re-deriving the spec (or silently dropping it). Storing the full spec at defer-time makes deferral safe - the cost of "later" is paid once, up front, not lost.

package/pipeline/skills/shared/external/ci-cd-pipelines/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ci-cd-pipelines
-description: "CI/CD pipelines: GitHub Actions workflows, Docker multi-stage builds, environment management, secret management, deployment strategies"
+description: "CI/CD pipelines: GitHub Actions workflows, Docker multi-stage builds, environment management, secret management, deployment strategies. Use when setting up or fixing a build, test or deploy pipeline."
 tags: [ci-cd, github-actions, docker, deployment, devops, backend]
 version: "2025.1"
 ---

package/pipeline/skills/shared/external/context-compression/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: context-compression
-description: "When agent sessions generate millions of tokens of conversation history, compression becomes mandatory. The naive approach is aggressive compression to minimize tokens per request."
+description: "When agent sessions generate millions of tokens of conversation history, compression becomes mandatory. The naive approach is aggressive compression to minimize tokens per request. Use when an agent session has grown too long to keep in full and history has to be compressed."
 risk: unknown
 source: community
 ---

package/pipeline/skills/shared/external/council/SKILL.md

@@ -45,11 +45,11 @@ Run each as a distinct perspective (in-context, or as parallel sub-agents when
 the decision is high-stakes). Give each the same framing and ask for its
 strongest honest position, not a hedge.
 
-- **Skeptic** — attacks the leading option. What breaks it, what is being
+- **Skeptic** - attacks the leading option. What breaks it, what is being
   assumed, what is the failure mode nobody is naming?
-- **Pragmatist** — optimizes for shipping and reversibility. What is the
+- **Pragmatist** - optimizes for shipping and reversibility. What is the
   cheapest path that keeps options open? What is good-enough now?
-- **Critic** — optimizes for long-term cost and coherence. What does this choice
+- **Critic** - optimizes for long-term cost and coherence. What does this choice
   lock in? What is the second-order effect in six months?
 
 Add a fourth domain voice (security, cost, UX) only when the decision hinges on

package/pipeline/skills/shared/external/css-modern/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: css-modern
-description: "Modern CSS: container queries, nesting, @layer, Grid/Flexbox patterns, custom properties, animations, and transitions"
+description: "Modern CSS: container queries, nesting, @layer, Grid/Flexbox patterns, custom properties, animations, and transitions. Use when writing or reviewing modern CSS: layout, container queries, custom properties, animation."
 tags: [css, grid, flexbox, container-queries, nesting, animations, frontend]
 version: "2025.1"
 ---

package/pipeline/skills/shared/external/database-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: database-patterns
-description: "Database patterns: SQL best practices (PostgreSQL), indexing, query optimization, migrations, schema design, ORMs (SQLAlchemy, Prisma, Drizzle)"
+description: "Database patterns: SQL best practices (PostgreSQL), indexing, query optimization, migrations, schema design, ORMs (SQLAlchemy, Prisma, Drizzle). Use when designing a schema, writing migrations, or a query needs optimising."
 tags: [database, sql, postgresql, prisma, drizzle, sqlalchemy, backend]
 version: "2025.1"
 ---

package/pipeline/skills/shared/external/debugging-strategies/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: debugging-strategies
-description: "Transform debugging from frustrating guesswork into systematic problem-solving with proven strategies, powerful tools, and methodical approaches."
+description: "Transform debugging from frustrating guesswork into systematic problem-solving with proven strategies, powerful tools, and methodical approaches. Use when a bug resists guesswork and needs a systematic approach."
 risk: safe
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/docker-expert/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: docker-expert
-description: "You are an advanced Docker containerization expert with comprehensive, practical knowledge of container optimization, security hardening, multi-stage builds, orchestration patterns, and production deployment strategies based on current industry best practices."
+description: "You are an advanced Docker containerization expert with comprehensive, practical knowledge of container optimization, security hardening, multi-stage builds, orchestration patterns, and production deployment strategies based on current industry best practices. Use when writing or reviewing a Dockerfile, compose setup, or container build."
 category: devops
 risk: unknown
 source: community

package/pipeline/skills/shared/external/fastapi-pro/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: fastapi-pro
-description: Build high-performance async APIs with FastAPI, SQLAlchemy 2.0, and Pydantic V2. Master microservices, WebSockets, and modern Python async patterns.
+description: "Build high-performance async APIs with FastAPI, SQLAlchemy 2.0, and Pydantic V2. Master microservices, WebSockets, and modern Python async patterns. Use when building or reviewing an async Python API with FastAPI, SQLAlchemy or Pydantic."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/firebase/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: firebase
-description: "You're a developer who has shipped dozens of Firebase projects. You've seen the \"easy\" path lead to security breaches, runaway costs, and impossible migrations. You know Firebase is powerful, but you also know its sharp edges."
+description: "You're a developer who has shipped dozens of Firebase projects. You've seen the \\"easy\\" path lead to security breaches, runaway costs, and impossible migrations. You know Firebase is powerful, but you also know its sharp edges. Use when integrating or reviewing Firebase: auth, Firestore, functions, or its cost and scaling traps."
 risk: unknown
 source: "vibeship-spawner-skills (Apache 2.0)"
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/github-actions-templates/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: github-actions-templates
-description: "Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications."
+description: "Production-ready GitHub Actions workflow patterns for testing, building, and deploying applications. Use when a GitHub Actions workflow has to be written or hardened."
 risk: critical
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/help-skills/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: help-skills
-description: Mevcut tum iOS/Swift skill'lerini listeler ve ne ise yaradiklarini aciklar.
+description: "Mevcut tum iOS/Swift skill'lerini listeler ve ne ise yaradiklarini aciklar. Use when asked which iOS or Swift skills are available and what each one covers."
 risk: safe
 ---
 

package/pipeline/skills/shared/external/hig-components-content/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-components-content
-description: Apple Human Interface Guidelines for content display components.
+description: "Apple Human Interface Guidelines for content display components. Use when designing or reviewing how content is displayed on an Apple platform."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-components-layout/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-components-layout
-description: Apple Human Interface Guidelines for layout and navigation components.
+description: "Apple Human Interface Guidelines for layout and navigation components. Use when designing or reviewing layout and navigation on an Apple platform."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-components-status/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-components-status
-description: Apple HIG guidance for status and progress UI components including progress indicators, status bars, and activity rings.
+description: "Apple HIG guidance for status and progress UI components including progress indicators, status bars, and activity rings. Use when designing or reviewing progress, status or feedback UI on an Apple platform."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-components-system/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-components-system
-description: 'Apple HIG guidance for system experience components: widgets, live activities, notifications, complications, home screen quick actions, top shelf, watch faces, app clips, and app shortcuts.'
+description: 'Apple HIG guidance for system experience components: widgets, live activities, notifications, complications, home screen quick actions, top shelf, watch faces, app clips, and app shortcuts. Use when designing or reviewing widgets, Live Activities or notifications on an Apple platform.'
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-foundations/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-foundations
-description: Apple Human Interface Guidelines design foundations.
+description: "Apple Human Interface Guidelines design foundations. Use when a design decision turns on Apple's foundations: layout, typography, colour, motion, accessibility."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-inputs/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-inputs
-description: "Check for .claude/apple-design-context.md before asking questions. Use existing context and only ask for information not already covered."
+description: "Check for .claude/apple-design-context.md before asking questions. Use existing context and only ask for information not already covered. Use when designing or reviewing input controls, forms or text entry on an Apple platform."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-patterns
-description: Apple Human Interface Guidelines interaction and UX patterns.
+description: "Apple Human Interface Guidelines interaction and UX patterns. Use when an interaction or UX pattern on an Apple platform needs designing or reviewing."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-platforms/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-platforms
-description: Apple Human Interface Guidelines for platform-specific design.
+description: "Apple Human Interface Guidelines for platform-specific design. Use when a design has to fit a specific Apple platform's conventions."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/hig-technologies/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: hig-technologies
-description: "Check for .claude/apple-design-context.md before asking questions. Use existing context and only ask for information not already covered."
+description: "Check for .claude/apple-design-context.md before asking questions. Use existing context and only ask for information not already covered. Use when designing or reviewing a feature built on an Apple technology such as Sign in with Apple, Wallet or Maps."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/html-semantic/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: html-semantic
-description: "Semantic HTML5: elements, forms with validation and accessibility, SEO best practices, structured data, Open Graph, Twitter Cards"
+description: "Semantic HTML5: elements, forms with validation and accessibility, SEO best practices, structured data, Open Graph, Twitter Cards. Use when writing or reviewing markup, forms or document structure for semantics, accessibility and SEO."
 tags: [html, semantic, seo, forms, open-graph, structured-data, frontend]
 version: "2025.1"
 ---

package/pipeline/skills/shared/external/humanizer/SKILL.md

@@ -41,7 +41,7 @@ AI sprinkles friendly/emotive emoji into prose. Strip them.
 | Emotive / smiley emoji | "Done 🎉", "Hi there 🙂", "😊", "👍 looks good" | Remove the emoji, keep the words |
 | Emoji as decoration/bullet | "✨ Feature:", "🚀 Shipped", "🔥 Fast" | Plain text |
 
-Keep ONLY functional status/severity marks that a fixed template explicitly defines (e.g. a `✅/⏳` phase-tick strip, `🔴/🟡` severity labels). Everywhere else in prose — issue/Jira comments, Confluence/Wiki pages, PR bodies, commit messages — carry **no** emoji.
+Keep ONLY functional status/severity marks that a fixed template explicitly defines (e.g. a `✅/⏳` phase-tick strip, `🔴/🟡` severity labels). Everywhere else in prose - issue/Jira comments, Confluence/Wiki pages, PR bodies, commit messages - carry **no** emoji.
 
 ### AI Vocabulary
 

package/pipeline/skills/shared/external/ios-debugger-agent/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ios-debugger-agent
-description: Debug the current iOS project on a booted simulator with XcodeBuildMCP.
+description: "Debug the current iOS project on a booted simulator with XcodeBuildMCP. Use when an iOS bug has to be reproduced and diagnosed on a booted simulator."
 risk: safe
 source: "Dimillian/Skills (MIT)"
 date_added: "2026-03-25"

package/pipeline/skills/shared/external/ios-developer/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ios-developer
-description: Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimization.
+description: "Develop native iOS applications with Swift/SwiftUI. Masters iOS 18, SwiftUI, UIKit integration, Core Data, networking, and App Store optimization. Use when building or reviewing a native iOS feature in Swift or SwiftUI."
 risk: unknown
 source: community
 date_added: '2026-02-27'

package/pipeline/skills/shared/external/kotlin-coroutines-expert/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: kotlin-coroutines-expert
-description: "Expert patterns for Kotlin Coroutines and Flow, covering structured concurrency, error handling, and testing."
+description: "Expert patterns for Kotlin Coroutines and Flow, covering structured concurrency, error handling, and testing. Use when writing or reviewing coroutines and Flow, or a concurrency bug needs diagnosing."
 risk: safe
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/macos-menubar-tuist-app/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: macos-menubar-tuist-app
-description: Build, refactor, or review SwiftUI macOS menubar apps that use Tuist.
+description: "Build, refactor, or review SwiftUI macOS menubar apps that use Tuist. Use when building, refactoring or reviewing a SwiftUI macOS menubar app that uses Tuist."
 risk: safe
 source: "Dimillian/Skills (MIT)"
 date_added: "2026-03-25"

package/pipeline/skills/shared/external/macos-spm-app-packaging/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: macos-spm-app-packaging
-description: Scaffold, build, sign, and package SwiftPM macOS apps without Xcode projects.
+description: "Scaffold, build, sign, and package SwiftPM macOS apps without Xcode projects. Use when a SwiftPM macOS app has to be built, signed or packaged without an Xcode project."
 risk: safe
 source: "Dimillian/Skills (MIT)"
 date_added: "2026-03-25"

package/pipeline/skills/shared/external/monorepo-architect/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: monorepo-architect
-description: "Expert in monorepo architecture, build systems, and dependency management at scale. Masters Nx, Turborepo, Bazel, and Lerna for efficient multi-project development. Use PROACTIVELY for monorepo setup,"
+description: "Expert in monorepo architecture, build systems, and dependency management at scale. Masters Nx, Turborepo, Bazel, and Lerna for efficient multi-project development. Use PROACTIVELY for monorepo setup,. Use when a monorepo's build system, task graph or dependency layout needs designing or fixing."
 risk: safe
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/nextjs-app-router/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: nextjs-app-router
-description: "Next.js 15+ App Router: Server/Client Components, Server Actions, data fetching, layouts, middleware, ISR/SSG/SSR, and routing patterns"
+description: "Next.js 15+ App Router: Server/Client Components, Server Actions, data fetching, layouts, middleware, ISR/SSG/SSR, and routing patterns. Use when building or reviewing App Router work: Server Components, Server Actions, data fetching, layouts."
 tags: [nextjs, react, frontend, ssr, app-router, full-stack]
 version: "2025.1"
 ---

package/pipeline/skills/shared/external/nodejs-backend-patterns/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: nodejs-backend-patterns
-description: "Comprehensive guidance for building scalable, maintainable, and production-ready Node.js backend applications with modern frameworks, architectural patterns, and best practices."
+description: "Comprehensive guidance for building scalable, maintainable, and production-ready Node.js backend applications with modern frameworks, architectural patterns, and best practices. Use when building or reviewing a Node.js service: structure, error handling, configuration, scaling."
 risk: safe
 source: community
 date_added: "2026-02-27"

package/pipeline/skills/shared/external/observability-engineer/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: observability-engineer
-description: Build production-ready monitoring, logging, and tracing systems. Implements comprehensive observability strategies, SLI/SLO management, and incident response workflows.
+description: "Build production-ready monitoring, logging, and tracing systems. Implements comprehensive observability strategies, SLI/SLO management, and incident response workflows. Use when metrics, logging, tracing or alerting have to be designed or fixed."
 risk: unknown
 source: community
 date_added: '2026-02-27'