project/.claude/skills/doc-update/SKILL.md
Update documentation files with an execution-first approach: read source, plan briefly, edit immediately, summarize changes, and commit. Use when updating docs, syncing documentation with code changes, or batch-editing markdown files.
npx skillsauth add kcenon/claude-config doc-updateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Update documentation files with an execution-first workflow.
/doc-update README.md # Update a single file
/doc-update docs/ # Update all docs in directory
/doc-update docs/api.md --commit # Update and commit
/doc-update docs/ --dry-run # Show planned changes without applying
<file-or-directory>: Target to update (required)
.md files recursively[--commit]: Commit changes after applying edits (optional)
--commit: Edit files but do not commit--commit: Edit files, then create a commit with a one-line summary per file[--dry-run]: Preview mode (optional)
Follow this execution-first workflow strictly.
Do NOT spend more than 2 minutes on analysis before starting edits. If you find yourself reading a third file without having made any edits, stop and start editing immediately.
Read the target file(s) to understand current content. For directories, scan file names first, then read files as you edit them — not all upfront.
Write a brief plan of changes. Maximum 5 bullet points. Do not create detailed outlines, change matrices, or impact analyses.
Example:
Plan:
- Update API endpoint table with new /users/search route
- Fix outdated install command (npm → pnpm)
- Remove deprecated config section
- Add missing environment variable docs
- Update version references to 3.2.0
Start making changes file by file. Use the Edit tool for surgical modifications. Use Write only for new files or complete rewrites.
Rules:
After all edits are complete, provide a one-line summary per modified file:
Changes:
- docs/api.md: added /users/search endpoint documentation
- docs/install.md: updated package manager from npm to pnpm
- docs/config.md: removed deprecated v1 configuration section
If --commit flag is set, create a single commit with type docs:
docs(scope): brief description of changes
Include the file-level summary as the commit body.
| Condition | Behavior | |-----------|----------| | File not found | Report error, skip file, continue with remaining targets | | Binary file | Skip with warning | | No changes needed | Report "No updates required" and exit | | Read-only file | Report error and skip | | Dry-run mode | Show diff preview for each file, make no modifications |
Before finishing, verify:
development
Generate and validate the bidirectional traceability matrix linking requirements, design, code, tests, risk records, and standard clauses. Consumes docs/.index/{manifest,bundles,graph,router}.yaml plus an optional compliance/ directory and produces docs/.index/traceability.yaml (machine-readable) and docs/.index/traceability.md (human-readable). Read-mostly: writes only the two trace artifacts and never mutates source documents. Opt-in — no-op when docs/.index/graph.yaml is absent so non-regulated repos are unaffected.
development
Maintain a SOUP (Software Of Unknown Provenance) register for every third-party software item the project depends on. Discovers candidates from lockfiles (package-lock.json, go.sum, Cargo.lock, requirements.txt, pyproject.toml, pom.xml, packages.lock.json), enriches with human-supplied risk class and verification refs, validates against a license allow-list and the requirements catalogue, and emits a per-supplier report. Outputs docs/.index/soup.yaml plus docs/.index/soup.md. Subcommands: discover | enrich | validate | list | report. Bidirectional linking with traceability via the soup_ids[] field on requirement rows. Opt-in: no-op when no lockfile is detected and docs/.index/soup.yaml is absent. Atomic writes (*.tmp + rename); idempotent (records sorted by id). Implements IEC 62304 sections 5.3.3 (SOUP requirements) and 8.1.1 (configuration items).
devops
Parse sonarcloud[bot] PR comments, classify findings, codify whitelisted auto-fixes, escalate the rest.
testing
Manage Hazard and Risk records for projects on the regulated-industry track. Maintains a single normalized risk file (docs/.index/risk-file.yaml) holding hazard identification, initial and residual risk estimates, control measures with verification links, and bidirectional Risk<->Requirement linking via the requirements[] field. Subcommands: add | edit | evaluate | validate | list. Output is consumed by the traceability skill (matrix risk_ids[] field) and the evidence-pack skill (risk_file kind). Opt-in: no-op when docs/.index/manifest.yaml is absent so non-regulated repos are unaffected. Atomic writes via *.tmp + rename; idempotent for diffability. Implements ISO 14971 sections 5-9 operationally.