swe-knowledge

swe-knowledge is a skill for Claude Code from HsuanYuLee/polaris. It costs 232 tokens per session (11,176 once invoked), scanned A, original, MIT.

A shared definition of done for software changes. It says that code should live on a branch, have a pull request, pass review before entering the default branch, and pass local checks before being pushed.

In plain words
What is it for?
Use it when deciding whether a code change is ready for review and integration, including local type checks, linting, tests, smoke tests, and responses to reviewer comments.
Why use it?
It prevents a change from being called complete merely because the code works locally or its acceptance checks pass.

Skill for Claude Code

Written for Claude Code: installed under .claude/. Also seen: reads .claude/ paths; mentions Claude Code.

Good fit Use it when deciding whether a code change is ready for review and integration, including local type checks, linting, tests, smoke tests, and responses to reviewer comments.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hsuanyulee/polaris/swe-knowledge
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add HsuanYuLee/polaris --skill swe-knowledge
Clone the repo
git clone --depth 1 https://github.com/HsuanYuLee/polaris

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for swe-knowledge

README.md
[![agentmods](https://agentmods.dev/badge/skills/hsuanyulee/polaris/swe-knowledge/github.svg)](https://agentmods.dev/skills/hsuanyulee/polaris/swe-knowledge)
Your own site
<a href="https://agentmods.dev/skills/hsuanyulee/polaris/swe-knowledge"><img src="https://agentmods.dev/badge/skills/hsuanyulee/polaris/swe-knowledge/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for swe-knowledge

Your own site · 80×15
<a href="https://agentmods.dev/skills/hsuanyulee/polaris/swe-knowledge"><img src="https://agentmods.dev/badge/skills/hsuanyulee/polaris/swe-knowledge.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 232 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 11,176 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Prompt Injection · line 136
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
  • high Prompt Injection · line 136
    Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
    Fix: Audit all comments and invisible characters. Remove any instructions that direct the agent to perform unauthorized actions. Use plain, reviewable content.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00232 $0.11176
Opus 5.5 $0.00093 $0.04470
Sonnet 5.5 $0.00046 $0.02235
Haiku 4.5 $0.00023 $0.01118

Measured 3d ago against content hash da688696d908, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

swe-knowledge scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

The scan reads SKILL.md. This mod also ships 13 executable files (scripts/check-ship-point.sh, scripts/check-swe-delivered.sh, scripts/check-swe-done.sh, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.claude/skills/swe-knowledge/SKILL.md · 503 lines

How it starts

The opening of the file, as written. The whole thing — 503 lines — stays where its author put it; the contents beside it link to each section on GitHub.

swe-knowledge — 軟體工程的 Definition of Done

這裡放的是所有增量共用的完成條件。跟每張單獨有的驗收條件(acceptance criteria)分得很 開:AC 寫在那張單凍結的 assertion 裡,DoD 寫在這裡。一張單可以通過全部 AC 卻沒有 done—— assertion 全綠但改動還躺在預設分支上、沒有任何人看得到它,就是那個情況。

所以這幾條不要抄進任何一張單的凍結區。抄進去等於每張單都重簽一次同樣幾行不承載新資訊的 東西,而漏抄的那一張就靜默地少了一條完成條件。

五條

  1. 改動住在一條 branch 上,不躺在預設分支。 開的時機是「判定要立案之後、動手之前」—— 一個還沒開工的成功定義直接躺在預設分支上,等於它已經是既成事實。

    那條 branch 是自己建的。 改動只推到自己建的 branch。別人建的、或有別人的 PR 在用的 branch,任何情況都不推——推不推得動、用不用 force 都一樣。要在別人還沒併的 branch 之上 做事,從它切一條自己的,PR 的 base 指向它。

    所以別人的 branch 推不動的時候,那不是要解決的問題。 它從一開始就不是推的對象, 沒有「換個方法推上去」這一題。2026-09-10 的實例:一顆 PR 的 base 是同事還沒併的 branch,遠端規則讓兩條都推不動,討論裡出現了「那條也一樣推不動」——那條本來就不是我們 會去推的東西。

  2. 有一個 PR。 PR 開出來就是實作完成:它是那份改動變成可被別人看見、可被判定的 東西的那一刻。沒有 PR 的改動不管本機多綠都還沒 done。

    開之前,在改動落下去的那棵樹上跑過 check-your-own-work,它列出的每一項都處置完。 這是這一條的一部分,不是開完之後的選配:review 抓到的問題,多半是作者自己對一次就看得到 的那幾類。2026-09-17~10-01 兩週裡,有人 review 的 PR 只有一半一次過,被抓到的五類問題 有四類那支 skill 本來就在問,而開 PR 的那些 session 幾乎沒有一個跑過它。怎麼跑、為什麼要 指名那棵樹,在〈開 PR〉。

    一個功能跨好幾個 repo 的時候,只做了一半的那顆 PR 開 draft,描述寫出它依賴哪一顆。 單獨看它是綠的,併進去卻不成立;全部做完、端到端在本機量過真值,才轉成可以 review。 2026-09-24 的標本:讀取那一端的 PR 回了一個新欄位,寫入那一端還沒把它寫進索引,前者單獨 上線之後那個欄位全部是 null。

  3. 判定過才進預設分支。 進去的路徑是那個 PR,不是直接推。

    這一條有東西在守(DP-865):scripts/check-ship-point.sh 在併 PR、建或推 release tag、送 部署請求之前,問那個動作對到的本地單判過了沒——站別要是 delivered,併的時候 head 還要是 交付紀錄記的那一個。對不到任何本地單的不擋:別人的 PR、別人的發佈不是這一條管的。開 PR 不擋,PR 開出來是實作完成,判定在它之後。任何 agent 都能從命令列叫它;Claude Code 的 .claude/hooks/gate-ship-point.sh 只是轉呼叫它。

  4. push 之前,本機跑完跑得動的驗證。 type check、lint、單元測試、受影響路徑的冒煙。 把 CI 當第一道防線等於把 reviewer 當驗證工具。

  5. reviewer 提的每一條,處置回到那條意見上。 不是「有沒有處理」——是提出者拿不拿 得到那個處置。他看的是他留言的地方,回在別處他收不到。

    處置有四種:照做、回覆說明為什麼不照做、拒絕、另外開單。照做不是預設。「處置」這個 字是中性的,而它常被讀成「照做」。一條意見可以是對的、而仍然不該在這一輪做;也可以是 這個 repo 根本不做那件事。讀成「照做」的話,這一條會把每一則意見都變成一次施工。

    每一串都算,nit 也算。 「妥善處理」的量法是:每一串的最後一則是作者,而且那一則說出了 四種處置裡的哪一種。標成 nit 的意見只是提出者在說「這條不擋你」,不是在說「這條不用回」。

    回覆承認對方說得對、卻沒有改,不算四種處置的任何一種。 那是第五種,而它讀起來像照做。 回覆與 merge 之間也要留給提出者重看的機會,不在同一分鐘內回完就合併。

Read the full file on GitHub · 503 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed · +6 lines da688696d908
  2. 12d ago Changed · +2 lines 448f06ef2861
  3. 13d ago Changed · +14 lines e0dce62f022f
  4. 19d ago Changed · +21 lines 232236a25592
  5. 24d ago Changed · +7 lines 4c4575e67b65
  6. 25d ago Changed · +25 lines cb3e64df847f
  7. 26d ago Changed · +26 lines f139ade919bd
  8. 1mo ago Changed · +9 lines a69b6dd857e5
  9. 1mo ago Changed · +36 lines 1caf94e24f22
  10. 1mo ago First seen · 357 lines · 232 tokens per session scan A 1499bed22459

Subscribe to this mod's changes

swe-knowledge is a skill published in the GitHub repository HsuanYuLee/polaris (5 stars, last pushed 2d ago), licensed MIT. It adds 232 tokens to every session and 11,176 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

github-readme

Generate polished GitHub README.md files for Mick's repositories in his established voice and structure. Always trigger immediately when the user's message starts with "readme" or "gr". Also trigger on "write a readme", "generate readme", "readme for this repo", "document this repo", or any request to create or…

mickpletcher/AI-Skills · 98 tokens

github-repo-architect

Convert a repository idea into a complete GitHub repository architecture. Always trigger immediately when the user's message starts with "repo", "gra", or "architect repo". Also trigger on "build a repo structure", "design a GitHub repo", "scaffold this repository", "create repository architecture", "turn this idea…

mickpletcher/AI-Skills · 106 tokens

datalad

Retrieves, versions, and publishes scientific datasets with DataLad and git-annex, and captures computational provenance with datalad run, rerun, and containers-run. Use when cloning or fetching data from OpenNeuro, DANDI, datasets.datalad.org, or any DataLad dataset; when a file in a dataset reads as a broken symlink…

K-Dense-AI/scientific-agent-skills · 147 tokens

resolve-conflicts

Use this skill immediately when the user mentions merge conflicts that need to be resolved. Do not attempt to resolve conflicts directly - invoke this skill first. This skill specializes in providing a structured framework for merging imports, tests, lock files (regeneration), configuration files, and handling…

tailcallhq/forgecode · 68 tokens

github-pr-description

Generate and create pull request descriptions automatically using GitHub CLI. Use when the user asks to create a PR, generate a PR description, make a pull request, or submit changes for review. Analyzes git diff and commit history to create comprehensive, meaningful PR descriptions that explain what changed, why it…

tailcallhq/forgecode · 72 tokens

ship

Pre-release gate. Run the full gate, responsive + render checks, then produce the release checklist (README badge/current/changelog). Use before tagging a release.

plugin87/ux-ui-agent-skills · 34 tokens