company-skill 4.2.0 → 4.3.0

package/README.md

@@ -145,13 +145,20 @@ Override per employee: `- ML Scientist, experiments [opus]`
 
 ## Installed Skills
 
-Auto-installed on first run. When installed, employees MUST use them.
-
-| Pack | What employees get |
-|------|-------------------|
-| gstack | /review, /ship, /qa, /investigate, /browse |
-| GSD | /gsd-plan-phase, /gsd-execute-phase, /gsd-verify-work, /gsd-debug |
-| trailofbits | Security audit, vulnerability detection |
+Auto-installed on first run. Leads assign skills to workers by task type.
+
+| Task type | Skill | Pack |
+|-----------|-------|------|
+| Code review | /review | gstack |
+| Bug fix | /investigate | gstack |
+| QA testing | /qa | gstack |
+| Ship code | /ship | gstack |
+| Browse/test site | /browse | gstack |
+| Security audit | /secure-phase | trailofbits |
+| Debug with state | /gsd-debug | GSD |
+| Plan work | /gsd-plan-phase | GSD |
+
+If no skill matches the task, workers use raw tools.
 
 <details>
 <summary>Install more skill packs</summary>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "company-skill",
-  "version": "4.2.0",
+  "version": "4.3.0",
   "description": "Goal-driven multi-employee company for Claude Code. Give it a goal, it runs until done.",
   "bin": {
     "company-skill": "./bin/install.js"

package/skill/SKILL.md

@@ -88,6 +88,8 @@ If a lead realizes an idle employee is needed after all: add them to active rost
 
 Each worker gets: their task, their previous findings file, failed approaches from playbook.
 
+If a skill was assigned (see Skill Routing table), invoke it via the Skill tool FIRST before doing anything else.
+
 Every finding MUST have:
 ```
 FINDING: what
@@ -142,9 +144,22 @@ CEO updates COMPANY.md: tag `[inactive]` on zero-contribution roles, `[priority]
 CEO, CTO, Internal Reviewer, User Advocate, Devil's Advocate, Elegance Enforcer.
 Deduplicated if user defines them in COMPANY.md.
 
-## Skills
+## Skill Routing
+
+Leads MUST assign a skill when the task matches. Workers MUST invoke it via the Skill tool.
+
+| Task type | Skill | When |
+|-----------|-------|------|
+| Code review | /review | Any PR or diff needs review before merging |
+| Bug fix | /investigate | Root cause unknown, need systematic debugging |
+| QA testing | /qa | Test a web app, find and fix bugs |
+| Ship code | /ship | Create PR, run tests, push |
+| Security audit | /secure-phase | Check for vulnerabilities in code |
+| Debug with state | /gsd-debug | Complex bug needing persistent debug session |
+| Plan work | /gsd-plan-phase | Break complex task into steps |
+| Browse/test site | /browse | Navigate URLs, check page state, screenshots |
 
-When installed: MUST use /review for code review, /investigate for bugs, /qa for testing, /ship for PRs. Skills are installed in the Preamble.
+If no skill matches, workers use raw tools (Read, Write, Bash, etc.).
 
 ## Stop Hook