jacobpevans/workspace-standards
project-standards/skills/workspace-standards/SKILL.md
Use when setting up or managing multi-repo workspaces
$ install --global
skillsauthnpx skillsauth add jacobpevans/claude-code-plugins workspace-standardsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 22, 2026, 7:52 PM21.6s1 file scanned
SKILL.md
- name:
- workspace-standards
- description:
- Use when setting up or managing multi-repo workspaces
Workspace Management Standards
Cross-Project Documentation
Each project must maintain:
- README.md at root: purpose, quick start, usage examples, cost implications
- Directory structure docs for complex projects
- Change logs for significant modifications
Git Workflow
- Branching:
mainfor production. Prefixes:feature/,bugfix/,hotfix/,release/,chore/. - Commits: Follow Conventional Commits (
feat:,fix:,docs:, etc.). - Worktrees: All development in dedicated worktrees
(see
/git-workflow-standards).
Security
- Use
.envlocally (never committed) and secure parameter stores for cloud. - Principle of least privilege for all resources and services.
Cost Management
| Environment | Lifecycle | | --- | --- | | Development | Automated shutdown | | Testing | Manual cleanup | | Production | Scheduled backups |
Define and monitor monthly budgets per environment.
Project Lifecycle
- Create: Initialize with standard templates (README, .gitignore, LICENSE).
- Maintain: Review dependencies, update docs, optimize costs.
- Retire: Document, archive, clean up.
Related Skills
- agentsmd-authoring (project-standards) — Use when editing agentsmd files, creating skills/agents/rules, or working in ai-assistant-instructions
- skills-registry (project-standards) — Use when looking up available tools, skills, commands, agents, or plugins
Related Skills
jacobpevans/self-hosted-runners
documentation
VerifiedTrustedCommunity
Use when editing GitHub Actions workflow files (.github/workflows/*.yml) in JacobPEvans repos. Documents when to target self-hosted RunsOn runners vs GitHub-hosted runners, the v3 label catalog used across the org, the required github.run_id segment, and the GitHub App allowlist prereq.
2SKILL.mdUpdated May 16, 2026
jacobpevans/refresh-repo
testing
VerifiedTrustedCommunity
Check PR merge readiness, sync local repo, cleanup stale worktrees; optional cross-repo sweep and stale-branch prune modes
2SKILL.mdUpdated Apr 28, 2026
jacobpevans/rebase-pr
tools
VerifiedTrustedCommunity
Local rebase-merge workflow for pull requests with signed commits
2SKILL.mdUpdated Apr 28, 2026
jacobpevans/gh-cli-patterns
tools
VerifiedTrustedCommunity
Canonical reference for all gh CLI command shapes used by skills in this plugin. Defines the placeholder convention, allowed --json fields, GraphQL fallback rules, -f/-F/--raw-field flag semantics, the PR-readiness gate, code-scanning alert query, review-thread fetch/count/resolve mutations, and heredoc bodies. Prevents Unknown JSON field errors and divergent query shapes.
2SKILL.mdUpdated Apr 28, 2026