workflow
Workflow
Scope Constraints
- Advisory skill defining development process, commit format, and coding discipline
- Does not execute commands, modify files, or interact with git directly
- Boundaries: delegates git operations to git-status, git-workflows, and github-workflow skills
Input Sanitization
- Commit messages: free text, reject null bytes
- Plan content: free text, reject null bytes
Development Flow
- Brainstorm → plan → implement (for non-trivial features)
- Write failing test first, then implementation
- Verify with actual command output before marking done
Commits
Format: <type>: <description>
Types: feat, fix, refactor, test, docs, chore
Plans
- Make extremely concise. Sacrifice grammar for concision.
- End with list of unresolved questions, if any.
Output Format
Plan: add email validation to signup form
1. Write test for valid/invalid emails
2. Add validateEmail() to src/lib/validators.ts
3. Wire into SignupForm.tsx onSubmit
4. Run tests, verify build
Commit: feat: add email validation to signup form
Open questions: none
Gotchas
- Amending (
--amend) after a pre-commit hook failure destroys the previous commit — hook failure means commit didn't happen, so--amendmodifies the WRONG commit. Always create a new commit after fixing hook issues. git add .orgit add -Astages secrets (.env, credentials) — always add specific files by name- Skipping verification ("it works, I'll just commit") leads to broken builds — always run the actual test/build command and check output before committing
Don'ts
- Don't refactor unrelated code
- Don't add dependencies without asking
- Don't skip verification step
More from dtsong/my-claude-setup
web-security-hardening
Security audit checklist for web applications. Use when reviewing, auditing, or hardening a web app's security posture. Covers rate limiting, auth headers, IP blocking, CORS, security middleware, input validation, file upload limits, ORM usage, and password hashing. Triggers on requests like "review security", "harden this app", "security audit", "check for vulnerabilities", or when building/reviewing API endpoints.
26vercel-react-best-practices
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
3code-search
Fast codebase searches using grep/glob. Triggers on "find", "search", "where is", "grep for".
2generate-diagram
>
2git workflows
Local git operations for syncing, branching, merging, and conflict resolution
2git-status
Quick git queries - status, diff, log, blame. Triggers on "git status", "what changed", "show diff", "recent commits".
2