01-package-scaffolding/project-skill-bootstrap/SKILL.md
Create project-local skills populated with actual project data, stack-specific conventions, and domain-specific procedures. Use after scaffolding to replace generic skill placeholders with real project-aware guidance that helps agents work effectively in this specific repo. Do not use before the project has established patterns (scaffold first) or for universal skills that belong in a skill library.
npx skillsauth add chelch5/skilllibrary project-skill-bootstrapInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Use this skill to create the repo-local skills layer with actual project content.
Read the project brief for project facts, stack decisions, and constraints.
Extract concrete facts from the repo:
# Stack evidence
cat package.json | jq '{name, scripts, dependencies}' 2>/dev/null
cat Cargo.toml 2>/dev/null | head -30
cat pyproject.toml 2>/dev/null | head -30
# Structure
tree -L 2 -I 'node_modules|dist|target|.git'
# Patterns (sample real code)
head -50 src/index.* src/main.* 2>/dev/null
ls tests/**/* 2>/dev/null | head -10
For each baseline skill, rewrite with actual project content:
| Skill | What to populate | |-------|-----------------| | project-context | Actual project summary, canonical doc paths, key architectural decisions | | repo-navigation | Actual directory layout, key files, common agent queries | | stack-standards | Real framework/language conventions, testing commands, linting rules | | ticket-execution | Standard lifecycle + any project-specific stage requirements | | docs-and-handoff | Project-specific doc paths and conventions |
Keep generic skills (workflow-observability, research-delegation, isolation-guidance) as-is unless the project has specific requirements.
Write each skill with YAML frontmatter (name and description required). Every skill must reference real files, real commands, and have no placeholder text.
From the canonical brief, identify:
Look for relevant patterns from:
CRITICAL: Do NOT install external skills directly. Use them as REFERENCE ONLY for synthesizing project-specific skills.
Create skills specific to THIS project. Examples:
component-patterns with project's component conventionsapi-contracts with project's schema formatmigration-safety with project's DB engine specificstest-patterns with project's test runner and fixture conventionsSkills written to the project-local skills directory with:
[...], TODO, etc.)../agent-prompt-engineering/SKILL.mdtesting
Manages context window budgets, loading strategies, and compaction techniques for AI-assisted coding sessions. Trigger on 'context window', 'what to load', 'context management', 'context overflow', 'token budget'. DO NOT USE for loading specific project docs into agent context (use project-context) or prompt wording and optimization (use prompt-crafting).
development
Implements authentication, session, token, and authorization patterns for the current stack. Trigger on 'add auth', 'JWT', 'OAuth', 'login endpoint', 'session management', 'API key auth'. DO NOT USE for OWASP hardening checklists (use security-hardening), threat modeling (use security-threat-model), or secret rotation/storage (use security-best-practices).
tools
Defines request/response shapes, versioning, validation, and compatibility rules for API-first work. Trigger on 'design API', 'OpenAPI spec', 'REST schema', 'API versioning', 'generate client SDK'. DO NOT USE for GraphQL schemas, gRPC/protobuf definitions (use stack-standards), auth endpoint logic (use auth-patterns), or external API client wrappers (use external-api-client).
development
Create a repo-local ticket system with an index, machine-readable manifest, board, and individual ticket files. Use when a repo needs task decomposition that autonomous agents can follow without re-planning the whole project each session. Do not use for executing tickets (use ticket-execution) or quick fixes that don't warrant formal tickets.