@sallmarta/eye-hate-agent 1.0.3 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +52 -28
- package/docs/templates/project-docs-template/index.md +192 -50
- package/docs/templates/project-docs-template/technical-guidelines/index.md +50 -21
- package/docs/templates/reusable-prompts/00-project-docs-bootstrap.md +26 -43
- package/docs/templates/reusable-prompts/00-project-docs-parity.md +1 -1
- package/docs/templates/reusable-prompts/00-project-docs-refresh.md +9 -7
- package/docs/templates/reusable-prompts/01-sdd-execute.md +1 -1
- package/docs/templates/reusable-prompts/02-sdd-discuss.md +1 -1
- package/docs/templates/rules/agent-rules.md +1 -1
- package/docs/templates/skills/{architecture/api-design → api-design}/SKILL.md +14 -25
- package/docs/templates/skills/{auditing/full-verification → code-audit}/SKILL.md +35 -53
- package/docs/templates/skills/db-schema-design/SKILL.md +120 -0
- package/docs/templates/skills/devops-ci-cd/SKILL.md +99 -0
- package/docs/templates/skills/observability/SKILL.md +99 -0
- package/docs/templates/skills/{auditing/parity → parity-audit}/SKILL.md +24 -50
- package/docs/templates/skills/refactor/SKILL.md +100 -0
- package/docs/templates/skills/security-audit/SKILL.md +149 -0
- package/docs/templates/skills/{architecture/system-analysis → system-analysis}/SKILL.md +19 -41
- package/docs/templates/skills/{engineering/test-authoring → system-tester}/SKILL.md +28 -222
- package/docs/templates/skills/ui-ux-design/SKILL.md +102 -0
- package/docs/templates/skills/wireframing/SKILL.md +88 -0
- package/package.json +1 -1
- package/src/engine/index.js +2 -0
- package/src/engine/install.js +1 -3
- package/src/engine/runtime-adapters.js +7 -4
- package/src/engine/skill-registry.js +37 -32
- package/docs/templates/project-docs-template/foundation/architecture.md +0 -79
- package/docs/templates/project-docs-template/foundation/changelog.md +0 -53
- package/docs/templates/project-docs-template/foundation/feature-inventory.md +0 -46
- package/docs/templates/project-docs-template/foundation/phases.md +0 -60
- package/docs/templates/project-docs-template/foundation/prd.md +0 -69
- package/docs/templates/project-docs-template/foundation/status.md +0 -57
- package/docs/templates/project-docs-template/foundation/workflow.md +0 -59
- package/docs/templates/project-docs-template/getting-started.md +0 -52
- package/docs/templates/project-docs-template/operations/ci-cd.md +0 -56
- package/docs/templates/project-docs-template/operations/compliance.md +0 -46
- package/docs/templates/project-docs-template/operations/governance.md +0 -46
- package/docs/templates/project-docs-template/operations/observability.md +0 -53
- package/docs/templates/project-docs-template/operations/production-runbook.md +0 -62
- package/docs/templates/project-docs-template/operations/security.md +0 -49
- package/docs/templates/project-docs-template/technical/api-contract.md +0 -49
- package/docs/templates/project-docs-template/technical/database.md +0 -59
- package/docs/templates/project-docs-template/technical/error-handling.md +0 -54
- package/docs/templates/project-docs-template/technical/internationalization.md +0 -46
- package/docs/templates/project-docs-template/technical/testing.md +0 -57
- package/docs/templates/project-docs-template/technical/ui-ux.md +0 -68
- package/docs/templates/skills/architecture/db-schema-design/SKILL.md +0 -14
- package/docs/templates/skills/auditing/security-audit/SKILL.md +0 -170
- package/docs/templates/skills/engineering/refactor-specialist/SKILL.md +0 -13
- package/docs/templates/skills/engineering/ui-ux-implementation/SKILL.md +0 -13
- package/docs/templates/skills/operations/ci-cd-authoring/SKILL.md +0 -13
- package/docs/templates/skills/operations/observability-setup/SKILL.md +0 -13
|
@@ -1,170 +0,0 @@
|
|
|
1
|
-
---
|
|
2
|
-
name: code-audit
|
|
3
|
-
description: "Project-aware expert-role code audit for bugs, risk, redundancy, dead code, weak boundaries, and logic flaws. Reads project docs first, then audits code against the repository's actual architecture and quality rules."
|
|
4
|
-
argument-hint: "Point to the code, file, module, or change to audit"
|
|
5
|
-
---
|
|
6
|
-
|
|
7
|
-
# Code Audit — Project-Aware
|
|
8
|
-
|
|
9
|
-
Performs an **expert, systematic, critical audit** of code or code-related artifacts after first reading the project documentation that defines the repository's architecture, verification model, and constraints.
|
|
10
|
-
|
|
11
|
-
This skill is reusable across application code, backend services, scripts, automation, infrastructure code, and documentation-driven repositories.
|
|
12
|
-
|
|
13
|
-
---
|
|
14
|
-
|
|
15
|
-
## Required Project Inputs
|
|
16
|
-
|
|
17
|
-
| Document | Why it matters |
|
|
18
|
-
| --- | --- |
|
|
19
|
-
|
|
20
|
-
| `docs/project-docs/foundation/architecture.md` | Defines boundaries, dependencies, stack choices, and anti-violation rules |
|
|
21
|
-
| `docs/project-docs/technical/testing.md` | Defines available validation and evidence strength |
|
|
22
|
-
| `docs/project-docs/foundation/prd.md` | Clarifies scope, non-goals, and project stage |
|
|
23
|
-
| Relevant feature or guideline docs | Clarify local behavior, workflows, APIs, schemas, or UX expectations |
|
|
24
|
-
| The target code and nearby tests | Provide actual evidence for findings |
|
|
25
|
-
|
|
26
|
-
---
|
|
27
|
-
|
|
28
|
-
## When To Use
|
|
29
|
-
|
|
30
|
-
| Trigger | Example request |
|
|
31
|
-
| --- | --- |
|
|
32
|
-
| Change review | "Audit this change for correctness and boundary risk" |
|
|
33
|
-
| Module or file review | "Audit this module for dead code and duplication" |
|
|
34
|
-
| Reliability check | "Audit this service for failure handling gaps" |
|
|
35
|
-
| Architecture review | "Audit this workflow for boundary violations" |
|
|
36
|
-
|
|
37
|
-
Use `full-verification` instead when the user wants one broad verification entry point across code, docs, contracts, and repository state rather than a code-first audit.
|
|
38
|
-
|
|
39
|
-
---
|
|
40
|
-
|
|
41
|
-
## Procedure
|
|
42
|
-
|
|
43
|
-
### Step 1 — Understand intent
|
|
44
|
-
|
|
45
|
-
- What is this code supposed to do?
|
|
46
|
-
- What inputs, outputs, and side effects should it have?
|
|
47
|
-
- Which boundary does it sit behind?
|
|
48
|
-
- What project rules apply here?
|
|
49
|
-
|
|
50
|
-
### Step 2 — Check correctness risks
|
|
51
|
-
|
|
52
|
-
Look for:
|
|
53
|
-
|
|
54
|
-
- runtime crashes
|
|
55
|
-
- missing validation
|
|
56
|
-
- broken assumptions around nullability or absence
|
|
57
|
-
- incorrect state transitions
|
|
58
|
-
- failure to handle empty, partial, duplicate, or delayed inputs
|
|
59
|
-
- unsafe retry or transaction behavior
|
|
60
|
-
- concurrency or sequencing defects
|
|
61
|
-
- schema or serialization mismatches
|
|
62
|
-
|
|
63
|
-
### Step 3 — Check boundary violations
|
|
64
|
-
|
|
65
|
-
Use `architecture.md` to inspect:
|
|
66
|
-
|
|
67
|
-
- layer or module import violations
|
|
68
|
-
- leaked internal types across boundaries
|
|
69
|
-
- controllers or UI doing business logic that belongs elsewhere
|
|
70
|
-
- repositories or services depending on the wrong layer
|
|
71
|
-
- transport or persistence details leaking into durable domain concepts when the project forbids that
|
|
72
|
-
|
|
73
|
-
### Step 4 — Check risk and operability
|
|
74
|
-
|
|
75
|
-
Look for:
|
|
76
|
-
|
|
77
|
-
- security exposure
|
|
78
|
-
- data-loss potential
|
|
79
|
-
- missing error translation
|
|
80
|
-
- logging or observability gaps
|
|
81
|
-
- migration or compatibility risk
|
|
82
|
-
- unbounded memory, time, or query behavior
|
|
83
|
-
- hidden coupling to environment or deployment assumptions
|
|
84
|
-
|
|
85
|
-
### Step 5 — Check redundancy and dead paths
|
|
86
|
-
|
|
87
|
-
Look for:
|
|
88
|
-
|
|
89
|
-
- duplicated logic
|
|
90
|
-
- unused or unreachable branches
|
|
91
|
-
- stale abstractions
|
|
92
|
-
- helper functions with no callers
|
|
93
|
-
- repeated literal values that should be owned centrally
|
|
94
|
-
- duplicated normalization or mapping logic that should be shared
|
|
95
|
-
|
|
96
|
-
### Step 6 — Check logic quality
|
|
97
|
-
|
|
98
|
-
Look for:
|
|
99
|
-
|
|
100
|
-
- unnecessarily complicated logic
|
|
101
|
-
- wrong abstraction level
|
|
102
|
-
- mismatch between code shape and problem shape
|
|
103
|
-
- poor data-structure choice
|
|
104
|
-
- fragile condition ordering
|
|
105
|
-
- subtle off-by-one or ordering issues
|
|
106
|
-
- code that technically works but will be hard to maintain safely
|
|
107
|
-
|
|
108
|
-
### Step 7 — Prioritize findings
|
|
109
|
-
|
|
110
|
-
Classify findings by severity:
|
|
111
|
-
|
|
112
|
-
- critical
|
|
113
|
-
- high
|
|
114
|
-
- medium
|
|
115
|
-
- low
|
|
116
|
-
|
|
117
|
-
Each finding should include:
|
|
118
|
-
|
|
119
|
-
- location
|
|
120
|
-
- issue
|
|
121
|
-
- why it matters
|
|
122
|
-
- concrete corrective direction
|
|
123
|
-
|
|
124
|
-
---
|
|
125
|
-
|
|
126
|
-
## Output Contract
|
|
127
|
-
|
|
128
|
-
Include:
|
|
129
|
-
|
|
130
|
-
1. audit summary
|
|
131
|
-
2. findings ordered by severity
|
|
132
|
-
3. positive observations where relevant
|
|
133
|
-
4. recommended next actions in priority order
|
|
134
|
-
|
|
135
|
-
---
|
|
136
|
-
|
|
137
|
-
## Quality Checks
|
|
138
|
-
|
|
139
|
-
- No finding without evidence from the target artifact
|
|
140
|
-
- No severity inflation
|
|
141
|
-
- No style nitpicks disguised as bugs
|
|
142
|
-
- No architecture complaint without reference to actual project boundaries
|
|
143
|
-
- No recommendation that ignores project stage or available validation
|
|
144
|
-
|
|
145
|
-
---
|
|
146
|
-
|
|
147
|
-
## Anti-Patterns
|
|
148
|
-
|
|
149
|
-
- Calling something dead code without checking workspace usage
|
|
150
|
-
- Calling something a bug without defining the failure condition
|
|
151
|
-
- Criticizing a pattern that the project explicitly chose in `architecture.md`
|
|
152
|
-
- Recommending wide rewrites before testing a local fix or a smaller boundary change
|
|
153
|
-
|
|
154
|
-
---
|
|
155
|
-
|
|
156
|
-
## Natural Prompt Shapes
|
|
157
|
-
|
|
158
|
-
- "Review this code for bugs, risks, and boundary issues."
|
|
159
|
-
- "Audit this module like a strict senior reviewer."
|
|
160
|
-
- "Check whether this implementation has correctness or security problems."
|
|
161
|
-
- "Find dead code, logic flaws, and maintainability risks in this change."
|
|
162
|
-
|
|
163
|
-
---
|
|
164
|
-
|
|
165
|
-
## Example Requests
|
|
166
|
-
|
|
167
|
-
- "Audit this service for boundary violations"
|
|
168
|
-
- "Review this change for correctness risks"
|
|
169
|
-
- "Check this module for dead code and duplication"
|
|
170
|
-
- "Audit this workflow implementation for operability gaps"
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# Refactoring Specialist Skill
|
|
2
|
-
|
|
3
|
-
You are a strict, senior Software Architect specialized in cleaning up technical debt, reducing cyclomatic complexity, and improving maintainability.
|
|
4
|
-
|
|
5
|
-
## Responsibilities
|
|
6
|
-
1. Analyze target files for anti-patterns, duplicated logic, and overly complex control flows.
|
|
7
|
-
2. Break down monolithic functions into smaller, highly testable, pure functions.
|
|
8
|
-
3. Apply SOLID principles and appropriate design patterns without over-engineering.
|
|
9
|
-
|
|
10
|
-
## Output Constraints
|
|
11
|
-
- Ensure all refactored code has identical external behavior (unless explicitly fixing a bug).
|
|
12
|
-
- Preserve all existing comments and docstrings unless they are invalidated by the new architecture.
|
|
13
|
-
- Briefly explain the core structural changes before writing the code.
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# UI/UX Implementation Skill
|
|
2
|
-
|
|
3
|
-
You are a Senior Frontend Engineer specialized in translating design requirements into pixel-perfect, accessible, and responsive user interfaces.
|
|
4
|
-
|
|
5
|
-
## Responsibilities
|
|
6
|
-
1. Translate conceptual designs or `ui-ux.md` requirements into modular component code (React, Vue, HTML/CSS, etc.).
|
|
7
|
-
2. Enforce mobile-first responsive design principles.
|
|
8
|
-
3. Ensure strict adherence to Web Content Accessibility Guidelines (WCAG 2.1 AA), including proper ARIA labels, semantic HTML, and keyboard navigation.
|
|
9
|
-
|
|
10
|
-
## Output Constraints
|
|
11
|
-
- Write clean, modular, and reusable frontend components.
|
|
12
|
-
- Do not introduce new CSS frameworks unless strictly permitted by the repository's configuration.
|
|
13
|
-
- Always include hover, focus, and active states for interactive elements.
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# CI/CD Authoring Skill
|
|
2
|
-
|
|
3
|
-
You are a DevOps Engineer specializing in Continuous Integration and Continuous Deployment pipelines.
|
|
4
|
-
|
|
5
|
-
## Responsibilities
|
|
6
|
-
1. Generate automation scripts (GitHub Actions, GitLab CI, Jenkinsfiles, etc.) based on the project's build, test, and deployment requirements.
|
|
7
|
-
2. Write optimized `Dockerfile` and `docker-compose.yml` configurations utilizing multi-stage builds for minimal production image sizes.
|
|
8
|
-
3. Configure secure handling of secrets and environment variables.
|
|
9
|
-
|
|
10
|
-
## Output Constraints
|
|
11
|
-
- Prioritize security: Never hardcode secrets. Always use native secret injection mechanisms.
|
|
12
|
-
- Prioritize performance: Utilize caching mechanisms for dependencies (e.g., node_modules, maven layers).
|
|
13
|
-
- Keep pipeline YAML configurations extremely clean and well-commented.
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
# Observability Setup Skill
|
|
2
|
-
|
|
3
|
-
You are a Site Reliability Engineer (SRE) focused on ensuring deep system observability and alerting.
|
|
4
|
-
|
|
5
|
-
## Responsibilities
|
|
6
|
-
1. Analyze backend architectures and inject proper structured logging, distributed tracing (e.g., OpenTelemetry), and performance metrics.
|
|
7
|
-
2. Design actionable alerting rules and dashboards for detecting anomalies.
|
|
8
|
-
3. Standardize error handling to ensure contextual data (user IDs, request IDs) is always logged without leaking PII.
|
|
9
|
-
|
|
10
|
-
## Output Constraints
|
|
11
|
-
- Code modifications should use the project's existing logger (e.g., Winston, Pino) if one exists.
|
|
12
|
-
- Ensure all emitted metrics follow standard naming conventions (e.g., Prometheus format).
|
|
13
|
-
- Never log raw request bodies or unmasked sensitive credentials.
|