ddaanet/project-conventions
skills/project-conventions/SKILL.md
Project prose and output conventions for sub-agents. Injected via skills: frontmatter — not user-invocable. Bundles deslop (prose quality), token economy, and tmp-directory rules.
testing
Updated Apr 5, 2026
$ install --global
skillsauthnpx skillsauth add ddaanet/agent-core project-conventionsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 2:13 AM84.9s1 file scanned
SKILL.md
- name:
- project-conventions
- description:
- |
- Project prose and output conventions for sub-agents. Injected via skills:
- frontmatter — not user-invocable.
- user-invocable:
- false
Apply Project Code and Output Conventions
Code Quality
Prose quality rules have moved to ambient context (communication.md). For code:
- Docstrings only for non-obvious behavior
- Comments explain why, never what
- No section banners — let structure communicate grouping
- Abstractions only when a second use exists
- Guard only at trust boundaries
- Expose fields directly until access control needed
- Build for current requirements, extend when needed
Token Economy
- Give file references (path:line), never repeat file contents
- Use bullets unless ordering matters (numbered lists cause renumbering churn)
- Direct, clear communication without verbosity
Temporary Files
All temporary files go in <project-root>/tmp/, never /tmp/ or /tmp/claude/.
For runbook execution, use plans/*/reports/. For ad-hoc work, use project-local tmp/.
Related Skills
ddaanet/formalize
development
VerifiedTrustedCommunity
Verify a Python function against its intended behavior by writing an icontract contract and checking it with `edify check` (CrossHair), repairing in a loop. Triggers on "formalize", "verify this function", "add a contract and check it", or after writing a function whose correctness matters. The in-context agent holds intent and asks the user when behavior is ambiguous; CrossHair owns the deduction.
SKILL.mdUpdated Jun 11, 2026
ddaanet/worktree
tools
VerifiedTrustedCommunity
Manage git worktrees for parallel task execution. Triggers on "create a worktree", "set up parallel work", "merge a worktree", "branch off a task", or uses the `wt`, `wt merge`, or `wt-rm` shortcuts. Worktree lifecycle: creation, focused sessions, merge ceremony, cleanup, parallel task setup.
SKILL.mdUpdated Apr 5, 2026
ddaanet/when
testing
VerifiedTrustedCommunity
Recall behavioral knowledge from project decisions. Triggers on "when to do X", situational patterns, or decision content for recognized situations. Invoke with "/when <trigger>".
SKILL.mdUpdated Apr 5, 2026
ddaanet/update
tools
VerifiedTrustedCommunity
Sync edify fragments and portable justfile to match the current plugin version. Detects user-edited files and warns instead of overwriting. Use --force to overwrite conflicts.
SKILL.mdUpdated Apr 5, 2026