skills/core/self-checking-workflow/SKILL.md
Embed verification steps directly into every task plan so Claude checks its own work before asking for your feedback.
npx skillsauth add bereniketech/claude_kit self-checking-workflowInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security scan pending...
This skill is queued for security scanning. Results will appear when the scan completes.
For every implementation task, structure the plan as paired build+verify steps rather than a flat list of build steps.
Rule: Never move to the next step until you reach 95% confidence the current step is correct.
Build the plan like this:
[ ] 1. Build: <feature or change>
[ ] 2. Verify: <specific check — screenshot / test / grep / DevTools>
[ ] 3. Build: <next feature>
[ ] 4. Verify: <specific check>
| Work type | Verification method | |-----------|---------------------| | UI / layout | Screenshot → visual inspect → note what's wrong | | Interactive UI | Open browser → click through golden path → check DevTools console for errors | | API / backend | Run the endpoint → check response shape → check error logs | | Data transforms | Print intermediate output → assert expected shape | | File edits | Re-read the file → confirm change landed cleanly | | Anything | Re-read requirements → confirm every bullet is addressed |
When building a UI component or page, run 3 passes before delivering V1:
Rule: Only present V1 to the user after at least 2 screenshot passes. State what changed between passes.
Before marking a step done, ask internally:
If the answer to any is "maybe," iterate once more. Mark done only when the answer is "no."
When all steps are complete, report:
Rule: Never say "done" without listing at least one specific verification you performed.
testing
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
testing
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
development
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
development
Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.