skills/maggy/SKILL.md
Maggy is a local AI engineering command center. AI-prioritized inbox across issue trackers (GitHub Issues/Asana), one-click TDD execute with iCPG context enrichment, daily competitor intelligence briefing.
npx skillsauth add alinaqi/claude-bootstrap maggyInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Maggy is a generic, local AI engineering command center. Install once, point it at your team's issue tracker and codebases, and get:
Execute currently runs claude -p --dangerously-skip-permissions so the TDD
pipeline isn't blocked waiting on approval prompts (subprocess has no terminal).
That flag grants Claude full permission to write/edit files and run shell
commands inside the target codebase, and the prompt it receives includes
content from the issue tracker (which any team member can author).
Hardening already in place:
working_dir is validated against the list of codebase roots in
~/.maggy/config.yaml — Claude can't be pointed at arbitrary filesystem paths.Roadmap: move the unconditional flag behind per-codebase config
(auto_approve: true|false) so privileged execution becomes opt-in.
Until then, treat Execute like git pull && make on any ticket you push
the button for — only run it on repos you own, against tickets from
authors you trust.
┌──────────────────────────────────────────────────────────────┐
│ maggy ──────────────┐ │
│ ├── skills/ ← installed globally → ~/.claude/ │
│ ├── commands/ ← installed globally → ~/.claude/ │
│ ├── scripts/icpg/ ← used by Maggy for context enrichment │
│ └── maggy/ ← dashboard: run `./install.sh` to use │
│ ├── src/ │
│ │ ├── providers/ ← GitHub / Asana / Linear │
│ │ ├── services/ ← inbox, competitor, executor │
│ │ └── api/ ← FastAPI routes │
│ └── install.sh │
└──────────────────────────────────────────────────────────────┘
| Scenario | How Maggy helps |
|------------------------------------------|-----------------------------------------------|
| Morning triage of 50 open issues | AI ranks them; top items stay top |
| Implementing a ticket | Execute → iCPG-enriched TDD pipeline |
| "What are competitors shipping?" | Daily briefing + filterable news feed |
| Multiple repos per team | Auto-picks right repo based on ticket content |
| New team onboarding | Configure via /maggy-init, no code writing |
# One-time install
cd $(cat ~/.claude/.bootstrap-dir)/maggy
./install.sh
# Configure
# Edit ~/.maggy/config.yaml — see maggy/config.example.yaml for the schema
# Credentials
export GITHUB_TOKEN=ghp_...
export ANTHROPIC_API_KEY=sk-ant-...
# Run
python3 -m src.main
# Or from Claude Code:
# /maggy-init # interactive wizard
# /maggy # launch dashboard
Maggy services never see GitHub/Asana directly — they talk to an IssueTrackerProvider Protocol. Drop-in swap between:
GitHubIssuesProvider — scans multiple repos, aggregates open issues, maps "done" → closedAsanaProvider — queries projects, respects workspace scopeLinearProvider — stub for futureThe same inbox, Execute pipeline, and Competitor features work with any provider.
When you click Execute on a ticket:
claude -p --dangerously-skip-permissions in that directoryBecause the spawned Claude Code runs in the target repo, it picks up:
CLAUDE.md~/.claude/CLAUDE.md.claude/hooks/, .mcp.jsonSo Execute gets the full bootstrap experience — not a stripped-down version.
Generic — works for any domain:
competitors.categories: ["fintech", "embedded-finance"] in ~/.maggy/config.yamlMaggy MVP is focused. Not shipped:
/improve-maggy)These are v2 work.
maggy/PLAN.md — architecture rationalemaggy/README.md — user docsmaggy/src/providers/base.py — IssueTrackerProvider Protocolmaggy/src/services/executor.py — TDD pipelinemaggy/src/services/competitor.py — discovery + briefingmaggy/src/services/inbox.py — AI prioritizationcommands/maggy.md — /maggy launchercommands/maggy-init.md — /maggy-init setup wizardtesting
Multi-model validation council — auto-validate plans, architecture changes, and PRs via validate-plan/review before executing
development
Task-scoped memory lifecycle — typed MnemoGraph prevents lossy context compaction by treating facts/decisions/code-refs/handoffs as distinct node types with per-type eviction policies
development
Mandatory code reviews via /code-review before commits and deploys
development
# Visual Validation — Autonomous Screenshot Verification ## Philosophy Every UI change should be visually verified before it ships. Peekaboo captures pixel-accurate screenshots. The system compares before/after and flags visual regressions. No manual "looks good to me" — the machine verifies what the machine built. ## Autonomous Flow ``` static/* files modified (detected by auto-review-hook or E2E testkit) ↓ peekaboo image --mode screen → ~/.maggy/visual-verify/after-{ts}.png ↓ Compa