Claude-Guardian
Claude Guardian는 계정 안전과 위험 방지를 위한 올인원 기능으로, 기기·계정 이력·네트워크·결제 옵션을 지능적으로 평가해 제공합니다
연구 기반, 플랫폼에 구애받지 않는 AI 코딩 에이전트용 스킬
Research-grounded, harness-agnostic skills for AI coding agents
스킬ShellGitHub @SteveVitali직접 설치운영자 미확인
써 보셨어요? 한 번만 눌러 주세요. 로그인은 필요 없어요.
아직 감지된 업데이트가 없습니다. GitHub 릴리스가 나오면 여기에 보입니다.
개인 계정의 공개 저장소 소유자는 GitHub로 로그인해 운영자를 확인하고 소개를 직접 관리할 수 있습니다. 관리자 승인은 필요하지 않습니다.
로그인한 뒤 확인 파일을 만들어 이 저장소의 기본 브랜치에 30분 안에 커밋해 주세요. 다른 브랜치나 포크의 파일은 인정하지 않습니다. 파일을 올린 뒤 아래에서 확인하면 관리자 승인 없이 관리할 수 있습니다. 자격을 유지하려면 파일을 남겨 두세요.
로그인이 필요하면 로그인 화면으로 이동합니다. 로그인 후 이곳으로 돌아와 원하는 확인 버튼을 다시 눌러 주세요.
설치형 프로젝트는 배포 도메인 없이도 확인할 수 있습니다. 개인 저장소는 GitHub 로그인으로, 조직 저장소는 위의 저장소 확인 파일로 직접 확인해 주세요.
README 전체를 불러오는 중입니다. 아래는 저장된 발췌입니다.
Rigorous engineering process for AI coding agents, packaged as portable
Agent Skills: implement a spec end-to-end to a
verified PR, review code with independent judgment — your own branch, or
anyone's PR — work through review feedback like a professional author, and
keep documentation (agent-facing and human-facing) converged with the code
it describes.README 전문 보기 ↗Rigorous engineering process for AI coding agents, packaged as portable Agent Skills: implement a spec end-to-end to a verified PR, review code with independent judgment — your own branch, or anyone's PR — work through review feedback like a professional author, and keep documentation (agent-facing and human-facing) converged with the code it describes.
SKILL.md directories. Claude Code, Codex,
Cursor, Gemini CLI, GitHub Copilot, and a growing list of clients load them
natively; anywhere else (Windsurf, Goose, a human with a terminal), a
one-line pointer to the skill file works.implement-specMost agents can write plausible code from a spec. What they don't do reliably
is everything around that — hold the plan across a long horizon, test what
they wrote, catch where the implementation quietly diverges from the spec,
and prove the result rather than assert it. implement-spec packages that
discipline: hand it an agent-ready spec, and it runs the lifecycle
autonomously, surfacing only at the end.
spec ─▶ branch ─▶ plan + test matrix ─▶ implement (tests alongside)
─▶ two-pass self-review ─▶ gap analysis vs the spec ─▶ close gaps
─▶ live verification ─▶ PR + acceptance-criteria evidence report
The full design rationale, with the literature behind each phase, is in skills/implement-spec/README.md.
Ten more skills stand alongside it — five cover the multi-session build lifecycle, three review and answer, two document:
| Skill | Purpose |
|---|---|
synthesize-spec | Turn a brief into a ratified, decomposable spec: a research ledger executed in fresh contexts, then synthesis, adversarial review, and operator ratification — the upstream half |
decompose-spec | Split one large spec into the fewest self-contained tickets that each fit a single fresh context, and seed the committed build memory — the planning half of a multi-session build |
orchestrate-build | Drive that chain to completion: run each ticket through implement-spec in a fresh context, report progress, pause for intervention, finish with the standard tail — the execution half |
build-memory | Owns the committed build-memory layout (docs/build/, docs/tickets/, docs/adr/), templates, validator, and legacy-scratch migration — the shared layer the build skills cite |
reconcile-build | The closeout the tail tickets invoke: one complete backlog + operational readiness, spec reconciliation, and a read-only integration plan |
self-review | Two-pass review of your own branch, pre-PR: mechanical verification, then independence-preserving design critique |
review-pr | Review someone else's PR: CI/verification grounding, focused design + security passes, calibrated severities, high-precision inline comments |
A large build runs as a chain of stages, each owned by a skill and leaving a committed artifact the next stage reads:
| Stage | What happens | Owning skill(s) |
|---|---|---|
| S0 Brief | the founding prompt is captured (docs/brief.md) | operator / synthesize-spec |
| S1–S3 Research → spec | research ledger rows executed in fresh contexts; the spec synthesized, reviewed, and ratified | synthesize-spec |
| S4 Decomposition | the ratified spec split into a dependency-ordered ticket chain; build memory seeded | decompose-spec + build-memory |
| S5 Build | each ticket run end-to-end in a fresh context; the worker closes its own ledger | orchestrate-build → implement-spec |
| S6 Capstone | whole-build gap analysis → composed verification → closure → operator sign-off, as tail tickets | CAP.* / GATE-ACCEPT tickets |
| S7 Reconciliation | one backlog + readiness, spec reconciliation, integration plan | reconcile-build (via REC.*) |
| S8 Docs | human-facing and agent-facing docs converged with the code | refresh-repo-docs + (via ) |
Every stage's state is committed under docs/ (the layout is
skills/build-memory/layout.md); only regenerable logs are gitignored.
When a spec is too large for one focused run, decompose-spec and
orchestrate-build turn it into a resumable chain of PRs — implement-spec
is still the per-ticket worker, run once per ticket in a fresh context:
decompose-spec is the planner, and the
quality ceiling of the whole build: it partitions the spec to a precise
objective — the fewest tickets such that each fits one fresh context with
rigor headroom and no cut severs a shared implicit decision — then reviews
its own split in a fresh context and seeds the build ledger. The two bounds
(context rot above, fragmented decisions below) trace to the
rationale.orchestrate-build is the driver. Its
key move: sequencing is deterministic code — a portable loop
(drive-build.sh that
discovers claude -p / goose run / codex exec / gemini -p) that holds
no state and dispatches each ticket to a fresh context — so nothing
accumulates context across the build and there is no long-lived agent
context to rot.
State lives in the ledger; the human pauses and intervenes at ticket
boundaries by editing it. At every boundary the PR checks are read
(ci-boundary.sh), and
the loop refuses to dispatch past a red, pending or unreadable PR; the
history check proves protected records only gained lines, and an operator
digest (digest.sh) reports
red PRs, outside merges, owed human work and spend at every pause. Degrades
to a subagent-per-ticket or a manual fresh-session floor
(drive-build.sh --print-prompt) where a harness offers less; the
rationale covers why it stays
harness-agnostic.Three seats at the same table, sharing one epistemology — every flag must be demonstrable, and precision beats recall (false positives are how reviewers lose the room):
self-review is the author pre-PR: Pass 1
runs auto-discovered build/test/lint (via
verify.sh, which infers the
toolchain when the repo doesn't declare one) plus binary
checklists; Pass 2 is design
critique under independence rules — fresh context where the harness
supports subagents, evidence-from-disk discipline where it doesn't. Also
implement-spec's review phase.review-pr is the reviewer's seat: grounded
in CI and (optionally) local verification, then separate focused passes
for correctness, design, security, and scope; findings gated by
demonstrability → confidence → novelty → materiality, labeled
blocking/important/nit/question, capped to prevent alert fatigue,
posted with suggestion blocks. It informs — approval stays human.address-pr-comments is the author
answering: every unresolved thread gets a fix, a commit link, a reasoned
push-back, an answer, or a scoped follow-up — never silence, never
sycophancy, never a mid-review force-push.Same convergence philosophy, two corpora with different consumers and quality bars — each with a deterministic, CI-gateable drift detector in front of the LLM work:
agent-docs owns the agent-facing knowledge
layer (AGENTS.md hierarchy) the other skills run on. Two modes —
bootstrap (reconnaissance → gotcha mining → generation) and refresh
(drift triage → surgical fixes) — auto-selected by a
detector that
classifies broken references as went stale vs authoring error using
git history. Owns the shared
Doc Authoring Guidelines.refresh-repo-docs owns what humans
read: README, docs/, CHANGELOG, guides, examples. Its
detector
flags broken references and docs older than the code they cite; the audit
is scoped by evidence (flagged docs, not "read the whole repo"), findings
are classed stale/cruft/gap/mode-drift with Diátaxis as the per-doc
quality lens, and no claim is written unverified.As a Claude Code plugin:
/plugin marketplace add SteveVitali/agent-skills
/plugin install agent-skills@agent-skills
Or by symlink, for any client that discovers skills on disk
(~/.claude/skills/, a project's .agents/skills/, etc.):
git clone https://github.com/SteveVitali/agent-skills.git ~/agent-skills
ln -s ~/agent-skills/skills/* ~/.claude/skills/
Clients without native skill support (e.g. Windsurf): a one-line
workflow or rule pointing at the skill file is enough — "Read and follow
<path>/skills/implement-spec/SKILL.md".
Each skill declares its inputs in SKILL.md frontmatter; state them in
natural language ("implement docs/spec.md, skip the ledger, base off main").
System requirements: git, bash 3.2+, and standard Unix tools; the PR
skills (review-pr, address-pr-comments) additionally need an
authenticated GitHub CLI (gh).
.claude-plugin/ # plugin + marketplace manifests (Claude Code)
CHANGELOG.md # notable changes, by plugin version
tests/lint-skills.sh # skill-text lint: retired phrases, required rules, rule ids resolve
skills/<skill-name>/
├── SKILL.md # entry point (Agent Skills format: frontmatter + steps)
├── README.md # design rationale (where it exists)
├── layout.md # shared reference contract (build-memory owns the build layout)
├── modes/ # mode-specific step files, loaded on demand (where applicable)
├── scripts/ # supporting shell helpers (bash 3.2+ compatible)
├── templates/ # artifact templates a skill instantiates (e.g. build-memory)
├── tests/ # fixture repos / stubs + run-tests.sh self-test (build-memory, orchestrate-build, agent-docs)
├── guidelines.md # shared authoring guidelines (where a skill owns one)
└── checklists/ # supporting checklists / shared reference docs (where applicable)
One predictable entry filename means an agent (or tool) pointed at skills/
knows where every skill starts; everything else in a skill directory is
progressive-disclosure material referenced from its SKILL.md.
docs/; only regenerable logs are gitignored. Deriving something means
checking it with a script, never maintaining it by hand.0.2.0 adds committed build memory and is backward-compatible: a repo
opts in only by the presence of docs/build/README.md containing
<!-- build-memory: v2 -->. A repo without that marker runs in legacy
scratch mode — byte-for-byte the 0.1.0 behaviour (gitignored ledgers under
.agents/scratch/, the old tickets_dir default), and every existing input
keeps its name and default.
To adopt the committed layout in a repo:
decompose-spec calls build-memory init during
seeding; nothing extra to do.build-memory init to write the layout
(idempotent; never clobbers a file), then check to validate..agents/scratch/ — invoke
build-memory migrate (dry-run by default; apply=true to perform). It
moves run ledgers → docs/build/runs/<ID>.md, PR bodies/tools/fixtures into
place, converts the machine ledger to docs/build/LEDGER.md, and records the
rename mapping — move/rename only, contents byte-identical, history never
renamed. Legacy ledgers still drive; on nextTicket: CAPSTONE a legacy
ledger converts to the tail via decompose-spec mode=extend.See CHANGELOG.md for the full 0.2.0 list and
skills/build-memory/layout.md for the layout
contract.
skills/<name>/SKILL.md with frontmatter: name, description
(what it does and when to use it), and inputs (each with name,
required, description). Keep the body harness-neutral — no
tool-specific directives in skill files.SKILL.md or has
distinct modes, split into a hub + modes/ files (see agent-docs).scripts/: bash 3.2-compatible, self-contained,
read-only by default — anything mutating must say so in its header, and
known limitations belong in the header too.address-pr-comments | Work through review feedback on your PR: triage every thread, fix or push back with evidence, reply with commit links |
agent-docs | Bootstrap or refresh the AGENTS.md hierarchy — the agent-facing knowledge layer |
refresh-repo-docs | Audit and sync human-facing docs (README, docs/, examples) against the code |
agent-docsDOC.*| S9 Next round | backlog + decision memo seed the next planning round | reconcile-build → decompose-spec mode=extend |