Open-source governance and hard gates for AI coding agents across Claude Code, Codex CLI, and Pi.
Skill Claude Code
Refine feature and sprint intent into a useful specification. Capture scope, observable criteria and material choices without repeated artifact approval ceremonies.
Skill Claude Code
Create a verified local Git commit when committing changes is requested. Not for explaining commit history, drafting a message only, or postponing a commit. Applies every commit gate and never implies a push or PR.
Skill Claude Code
Inspect context drift and refresh selected source-backed documents under existing authorization.
Skill Claude Code
Build source-backed project context through bounded inspection, optional agents, and safe selected writes.
Skill Claude Code
The banned-primitive gate. Routed to when changed code hashes, signs, encrypts, derives keys, generates security-relevant randomness, configures TLS, or imports a crypto library. Rejects broken primitives, disabled TLS verification, and home-rolled crypto; the approved-primitive list lives in security-controls.md. The…
Skill Claude Code
Investigate an unexplained defect or unexpected behavior without changing application code. Use for root-cause diagnosis and an evidence-backed handoff, including a bounded unresolved result. Not for implementing a known fix, new features, or explanation-only questions.
Skill Claude Code
Record user-decided ADRs or inspect their health read-only. Preserve attribution and acceptance evidence.
Skill Claude Code
Inspect architectural variances with SMARTS; record only explicit user choices. Report-only requests make no changes.
Skill Claude Code
Develop greenfield context from a durable interview and initialize it through the native context writer.
Skill Claude Code
The parallel fan-out primitive. Routed to by any skill or command that splits work across independent units and dispatches an agent per unit — subagent-driven-development, /sprint, parallel /review. It owns the dispatch/collect/funnel discipline: bound concurrency, isolate units, collect every result, dedupe overlap…
Skill Claude Code
Assistive /feature coordinator. Select relevant tasks from a maintained spec/plan, delegate a useful batch when warranted, record verified versus pending checks honestly, and give progress summaries without default human-approval stops.
Skill Claude Code
Open a PR or finish branch disposition; route CI watching and post-merge cleanup to their owners. Merge and discard need explicit authority.
Skill Claude Code
Clean up an already-merged local branch after proving containment. Confirm each discard and preserve unique work.
Skill Claude Code
Restructure code without changing observable behavior: rename, extract, inline, move, deduplicate, or replace an internal implementation with an equivalent one. Prove parity through unchanged pre-existing tests. Not for new behavior, bug fixes, explanation-only questions, or committing finished work.
Skill Claude Code
Prepare a declared release target, or preview it with --dry-run. Derive its version and require authorization before publication.
Skill Claude Code
The secret-source gate. Routed to when changed code reads, writes, or passes a secret — API key, token, password, connection string, signing key, certificate, or any value that grants access. Validates that every secret comes from the approved store and never lands in source, log, test fixture, error response, image…
Skill Claude Code
Threat-model a sensitive design with STRIDE on request. Read-only analysis of threats, controls, and implementation constraints.
Skill Claude Code
Assistive implementation engine for /sprint and scoped executing-plans work. Follow actual dependencies, implement or delegate coherently, run relevant checks, preserve honest evidence, and advance without artifact approval codes or compulsory reviewer cascades.
Skill Claude Code
Verify authorized feature, fix, and refactor work with scoped obligations, regression-first fixes, behavioral checks, characterization baselines, coverage, and lint.
Skill Claude Code
Run an opt-in deep codebase audit with persisted findings. Confirm cost before dispatch; filing and telemetry need separate approval.
Skill Claude Code
OPTIONAL per-task isolation for autonomous parallel work. Routed to only on explicit opt-in by subagent-driven-development or dispatching-parallel-agents, so parallel units mutate files without colliding. Stands up one worktree per unit, works it in isolation, then integrates each unit back onto the caller's working…
Skill Claude Code
Turn the selected specification into a maintained implementation plan with clear outcomes, useful tasks, dependencies, and verification steps. Drafting uses the existing authorization and does not require artifact approval codes, reviewer receipts, or a frozen implementation script.
Skill Claude Code
Vet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.
Skill Claude Code
Inspect ADR health read-only; optionally select one ADR with --adr N.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: