igmarin/rails-skills-orchestrator
rails-skills-orchestrator/SKILL.md
Use as the entry point when the task scope is unclear or spans multiple concerns — this skill routes and gates only; it does not implement anything itself. Identifies which specialized skill to invoke next (rspec-best-practices, rails-code-review, rails-tdd-slices, rails-migration-safety, rails-engine-author, ruby-service-objects, etc.) and enforces the Tests Gate Implementation mandate across all code-producing tasks. Select this INSTEAD of individual Rails skills when you don't yet know which specialist applies. Trigger words: where do I start, not sure how to approach this, don't know which skill to use, multi-step Rails task, unclear scope, spans multiple concerns, new complex Rails feature, how do I begin, what should I do first.
$ install --global
skillsauthnpx skillsauth add igmarin/rails-agent-skills rails-skills-orchestratorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 30, 2026, 4:46 PM10.4s1 file scanned
SKILL.md
- name:
- rails-skills-orchestrator
- license:
- MIT
- description:
- >
- specialist applies. Trigger words:
- where do I start, not sure how to approach this,
Rails Skills Orchestrator
Routes to the correct specialized skill for any Ruby on Rails task and enforces the Tests Gate Implementation mandate across all code-producing work.
When a task arrives, identify the matching skill from the tables below and name it explicitly as the next skill to use before responding further. Generated artifacts (YARD docs, Postman collections, READMEs) must be in English unless the user explicitly requests another language.
CROSS-CUTTING MANDATE: Tests Gate Implementation
Non-negotiable across every code-producing skill. Workflow: PRD → TASKS → TESTS → IMPLEMENTATION → YARD → DOCS → CODE REVIEW → PR. No implementation code until the test exists, has been run, and fails for the right reason (feature missing, not config/syntax). See the TDD Feature Loop below for the per-behavior cycle and checkpoints.
Available Skills
Planning & Tasks
| Skill | Use when... | | ----- | ----------- | | create-prd | Planning a feature or writing requirements | | generate-tasks | Breaking a PRD into implementation tasks | | ticket-planning | Creating tickets from a plan |
Rails Code Quality
| Skill | Use when... |
| ----- | ----------- |
| rails-code-review | Reviewing Rails PRs, controllers, models, migrations, or queries |
| rails-review-response | Evaluating or implementing code review feedback |
| rails-architecture-review | Reviewing structure, boundaries, fat models/controllers |
| rails-security-review | Auditing for XSS, CSRF, SQL injection, auth flaws |
| rails-migration-safety | Planning or reviewing production-safe migrations |
| rails-stack-conventions | Writing Rails code for PostgreSQL + Hotwire + Tailwind stack |
| rails-code-conventions | Daily coding checklist: DRY/YAGNI/PORO/CoC/KISS, linters, structured logging |
| rails-background-jobs | Adding or reviewing background jobs |
| rails-graphql-best-practices | Building or reviewing GraphQL APIs with graphql-ruby |
| rails-authorization-policies | Adding or reviewing roles/permissions (Pundit, CanCanCan, policy objects) |
| rails-performance-optimization | Investigating N+1s, slow queries, profiling, caching, query plans |
| rails-api-versioning | Versioning REST APIs, deprecation policies, v1/v2 routing |
| rails-database-seeding | Designing seeds vs fixtures for dev/test data |
| rails-frontend-hotwire | Turbo/Stimulus integration, frames, streams |
DDD & Domain Modeling
| Skill | Use when... | | ----- | ----------- | | ddd-ubiquitous-language | Clarifying domain terms or building a shared business glossary | | ddd-boundaries-review | Reviewing bounded contexts and language leakage | | ddd-rails-modeling | Mapping DDD concepts to Rails models, services, and value objects |
Ruby Patterns
| Skill | Use when... |
| ----- | ----------- |
| ruby-service-objects | Creating service classes with .call pattern |
| ruby-api-client-integration | Integrating external APIs with the layered Auth/Client/Fetcher/Builder pattern |
| strategy-factory-null-calculator | Building variant-based calculators with SERVICE_MAP dispatch |
| yard-documentation | Writing or reviewing YARD docs for Ruby classes and public methods |
Context & Setup
| Skill | Use when... | | ----- | ----------- | | rails-context-engineering | Before any code/spec/PRD in an existing Rails codebase — load schema, routes, nearest patterns, surface ambiguity | | rails-project-onboarding | First-time dev environment setup — Docker, env vars, database, test suite |
Testing
| Skill | Use when... |
| ----- | ----------- |
| rspec-best-practices | Writing, reviewing, or cleaning up RSpec tests; TDD discipline for all implementation |
| rails-tdd-slices | Choosing the best first failing spec for a Rails change |
| rails-bug-triage | Turning a bug report into a reproduction spec and fix plan |
| rspec-service-testing | Testing service objects (spec/services/) |
Rails Engines
| Skill | Use when... | | ----- | ----------- | | rails-engine-author | Creating or scaffolding a Rails engine | | rails-engine-testing | Setting up dummy app and engine specs | | rails-engine-reviewer | Reviewing an existing engine | | rails-engine-release | Preparing an engine release | | rails-engine-docs | Writing engine documentation | | rails-engine-installers | Creating install generators | | rails-engine-extraction | Extracting host app code into an engine | | rails-engine-compatibility | Ensuring cross-version compatibility | | api-rest-collection | Generating or updating Postman collections for REST endpoints |
Refactoring
| Skill | Use when... | | ----- | ----------- | | refactor-safely | Restructuring code while preserving behavior |
Skill Priority
When multiple skills could apply: TDD → Planning → Domain discovery → Process (refactor-safely) → Domain implementation (rails-*, ruby-*). Use rails-tdd-slices when the first failing spec is not obvious.
Typical Workflows
Sub-skills are invoked by stating their name as the next skill to apply, e.g. "Next skill: rails-tdd-slices", before proceeding with that skill's instructions.
TDD Feature Loop (primary daily workflow): rails-context-engineering → rails-tdd-slices → [Test Feedback checkpoint] → [Implementation Proposal checkpoint] → implement → [Linters + Suite gate] → yard-documentation → rails-code-review → rails-review-response (on feedback) → PR
Feature (standard): rails-context-engineering → create-prd → generate-tasks → TDD Feature Loop
Feature (DDD-first): rails-context-engineering → create-prd → ddd-ubiquitous-language → ddd-boundaries-review → ddd-rails-modeling → generate-tasks → TDD Feature Loop
Code review + response: rails-code-review → rails-review-response (on feedback) → re-review if Critical items addressed
Bug fix: rails-bug-triage → rails-tdd-slices → [GATE: reproduction spec fails] → fix → verify passes
New engine: rails-engine-author → [GATE: engine specs fail] → implement → rails-engine-docs
Refactoring: refactor-safely → [GATE: characterization tests pass on current code] → refactor → verify still pass
GraphQL: ddd-ubiquitous-language → rails-graphql-best-practices → TDD Feature Loop → rails-security-review
Assets
- assets/examples.md
Related Skills
igmarin/rails-agent-skills
development
VerifiedTrustedCommunity
Entry point for Rails development workflows covering TDD, RSpec, Service Objects, DDD, GraphQL, Engines, and Code Quality. Use when the user asks about Ruby on Rails development patterns, needs RSpec test suites generated, wants service objects scaffolded, is setting up GraphQL schemas, performing Rails code review, refactoring .rb files, working with domain-driven design, implementing background jobs, conducting Rails security checks, or building Rails engines. Generates RSpec tests, structures service objects, enforces TDD workflows, configures GraphQL schemas, and coordinates domain-driven design patterns. Trigger keywords: Rails, RSpec, TDD, Rails testing, Rails refactor, Rails API, Rails code review, domain driven design, service objects, GraphQL, Rails engine, Ruby, .rb, background jobs, Rails migrations, Rails security check.
21SKILL.mdUpdated May 18, 2026
igmarin/release-engine
development
VerifiedTrustedCommunity
Use when shipping a Rails engine gem — FIRST run full test suite (`bundle exec rspec`) and fix ALL failures, verify gemspec metadata and dependencies match tested Rails/Ruby versions, dry-run: `gem build *.gemspec && gem push --dry-run *.gem` and verify contents, generate CHANGELOG.md organized by category (added/changed/deprecated/removed/fixed), produce step-by-step upgrade notes with before/after code, set semantic version in `lib/[engine_name]/version.rb`, document deprecations with migration paths, load release assets conditionally and state which one informed the output. Trigger words: version bump, changelog, deprecation, gemspec, upgrade, release, publish gem, ship gem.
21SKILL.mdUpdated May 9, 2026
igmarin/tdd
development
VerifiedTrustedCommunity
Orchestrates the full Rails TDD cycle with hard gates: test MUST exist, be run, and FAIL for the correct reason (e.g. undefined method, not syntax error) before any implementation code — propose minimal implementation and wait for user approval → verify test PASSES → run full suite with rubocop, brakeman, rspec all green → produce YARD documentation and self-reviewed PR; phases context/test design→implementation→iterate→finish. Use when practicing test-driven development, red-green-refactor, TDD workflow, writing tests before code, adding tests first, or building a Rails feature where specs must gate implementation.
19SKILL.mdUpdated Jun 5, 2026
igmarin/setup
development
VerifiedTrustedCommunity
Complete Rails project setup loop with hard gates: verify Ruby version matches .ruby-version, Bundler installed, database connection successful, all env vars loaded, and ALL external CI actions pinned to immutable commit SHAs (never mutable tags like @v4) → configure CI/CD pipeline with linting, testing, and security scanning → validate end-to-end with bundle install, db:create, db:migrate, rspec, and write SETUP_CHECKLIST.md; phases context/onboarding→CI/CD configuration→environment validation. Use when starting a new Rails project, running `rails new`, configuring a Gemfile or .ruby-version, setting up a development environment, or wiring up CI/CD for a Ruby on Rails app. Trigger: setup project, new Rails app, configure CI/CD, dev environment setup, rails new, Gemfile setup, .ruby-version, Ruby on Rails project bootstrap.
19SKILL.mdUpdated Jun 5, 2026