dbvc/dbx-software-plan-first-implement-feature
skills/dbx-software-plan-first-implement-feature/SKILL.md
Manual trigger only. Use only when the user explicitly names `dbx-software-plan-first-implement-feature`, `$dbx-software-plan-first-implement-feature`, or asks to manually trigger this exact DBX Software Plan-First review-gated single-task implementation phase. Do not auto-trigger for ordinary implementation, tasks.md, next-task, or plan-first requests.
$ install --global
skillsauthnpx skillsauth add dbvc/skills dbx-software-plan-first-implement-featureInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 9, 2026, 2:36 AM265.7s20 files scanned
SKILL.md
- name:
- dbx-software-plan-first-implement-feature
- description:
- Manual trigger only. Use only when the user explicitly names `dbx-software-plan-first-implement-feature`, `$dbx-software-plan-first-implement-feature`, or asks to manually trigger this exact DBX Software Plan-First review-gated single-task implementation phase. Do not auto-trigger for ordinary implementation, tasks.md, next-task, or plan-first requests.
DBX Software Plan-First Implement Feature
DBX repository notes
- This repository uses the
dbx-prefix for stable skills; use the prefixed skill names in handoffs and cross-skill routing. - Keep this phase self-contained: load only the required references for the active phase, and do not pull sibling skill files unless the workflow explicitly hands off to that phase.
Manual Trigger
- Manual trigger only.
- Use only when the user explicitly names
dbx-software-plan-first-implement-feature,$dbx-software-plan-first-implement-feature, or says to use/trigger this exact skill. - Do not auto-trigger for ordinary implementation, tasks.md, next-task, or plan-first requests.
用于按计划执行单个 task。
语义
- 每次只执行
tasks.md中第一个未完成 task。 - 不跳 task，不静默改 plan，不手动把 task 标成完成。
- 实现前检查工作区安全。
- 实现后运行
review-ready，用户 review 通过后运行complete。 - 所有沟通、证据和任务完成摘要使用中文。
必须读取
references/workflow-rules.mdreferences/implement-notes.mdreferences/worktree-safety.mdreferences/review-checks.mdreferences/feedback-and-proof.mdreferences/impact-profiles.md
工作流
- 查看工作区：
git status --short --branch -uall
- 查看当前 workflow 状态：
scripts/issue-workflow.sh status <issue-id>
scripts/issue-workflow.sh next <issue-id>
- 只执行当前 task。
- 如果发现计划假设错误、source of truth 缺失、验证模型不适用或 scope 需要扩大，停止并报告，不要继续实现。
- 完成实现后运行：
scripts/issue-workflow.sh review-ready <issue-id>
- 输出
review-ready摘要，等待用户 review。 - 用户确认通过后运行：
scripts/issue-workflow.sh complete <issue-id>
禁止事项
- 不执行非当前 task 的工作。
- 不手动改
tasks.md完成状态。 - 不绕过失败验证。
- 不覆盖用户已有改动。
- 不在 review-ready 后继续改代码；如需改动，重新 review-ready。
输出
使用中文 review-ready 或 complete 摘要。
Related Skills
dbvc/dbx-technical-plan
development
VerifiedTrustedCommunity
Evidence-grounded technical implementation planning before code changes. Use when the user asks to plan a software feature, refactor, migration, bug-fix strategy, infrastructure change, validation strategy, rollout, or codebase modification before implementation. Produces a scoped plan contract with goal, non-goals, evidence boundary, source of truth, invariants, implementation slices, validation model, risks, and handoff. Do not use for direct implementation, concrete diff review, strict critique of an existing plan, product/design judgment, generic brainstorming, commit/PR writing, or the stateful dbx-software-plan-first phase chain unless explicitly requested.
5SKILL.mdUpdated Jun 12, 2026
dbvc/dbx-subagent-context
development
VerifiedTrustedCommunity
Codex 专用的 subagent 上下文策略辅助技能。Use when 用户要求使用 Codex subagent delegation、Codex worker/explorer delegation、并行 review、独立 reviewer、隔离上下文、不要带上下文、fork_context=false，或把 review/dbx-linus-review/waza-check/plan-eng-review 等技能交给 Codex subagent 执行时。默认新开 Codex subagent 不继承父线程历史，只传最小任务摘要；只有用户明确要求继承父线程时才使用 fork_context=true。不要因为用户讨论业务代码里的 worker、browser worker、架构 explorer 概念而触发。
3SKILL.mdUpdated Jun 9, 2026
dbvc/dbx-product-judgment
development
VerifiedTrustedCommunity
Use when the user asks to judge whether a product, feature, PRD, information architecture, content, interaction, UI flow, live product, implementation, roadmap, or competitor position is right, good, usable, valuable, coherent, worth building, or product-ready. Grounds judgment in target user, job/context, evidence, alternatives, critical path, trust, and implementation alignment. Ask blocking questions or collect evidence before judging when background is missing. Do not use for pure implementation, generic UI inspiration, ordinary code review without product judgment, generic market summaries, or unsupported guesses.
3SKILL.mdUpdated Jun 9, 2026
dbvc/dbx-diff-review
development
VerifiedTrustedCommunity
High-signal code change review workflow for PRs, patches, staged/index changes, working-tree diffs, commit ranges, and file-scoped review. Use when the user asks to review concrete code changes for functional/user-impact risks, data model correctness, state ownership, compatibility, or maintainability. Handles partial staged hunks and user-selected files/commits by selecting the exact review target before reading the diff. Do not use for implementation-only requests, generic code explanation, release publishing, issue triage, or plan-only Linus-style strict-pragmatic critique; for strict critique of a concrete diff, use this skill only to establish the target before dbx-linus-review.
3SKILL.mdUpdated Jun 9, 2026