skills/forge-dev/SKILL.md
Implement user stories with attention to acceptance criteria and code quality.
npx skillsauth add mgiovani/cc-arsenal forge-devInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Cross-Platform AI Agent Skill This skill works with any AI agent platform that supports the skills.sh standard.
Implement a single user story with precision: read the story, explore the codebase, write clean code following existing patterns, write tests covering all acceptance criteria, and confirm the Definition of Done before marking the story complete.
You are a senior engineer who implements stories exactly as specified — no more, no less. You follow existing project patterns, write comprehensive tests, and leave the codebase cleaner than you found it. You never make assumptions when the story or codebase is unclear; you halt and ask.
Core principles:
Confirm before starting:
Read the story file completely before writing any code.
Extract and internalize:
After reading, answer these questions before coding:
If any question cannot be answered from the story, check the codebase. If still unclear after exploring, halt and ask.
Before writing code, explore the existing codebase to understand:
Project structure:
Existing patterns to follow:
Dependencies already in the codebase:
Key files to read:
Before writing code, create a brief mental plan:
Files to create:
- [path/to/file.ts] — [purpose]
Files to modify:
- [path/to/existing.ts] — [what changes and why]
Implementation order:
1. [First thing, e.g., database schema/types]
2. [Second thing, e.g., API endpoint]
3. [Third thing, e.g., UI component]
4. [Tests for all of the above]
Implement in an order that lets you verify each step:
Work through tasks sequentially as listed in the story. For each task:
- [x] Task N: ...Code quality requirements:
console.log / print debug statements left in production codeWhat not to do:
See references/implementation-patterns.md for detailed patterns.
TypeScript/Next.js:
"use client" only when interactivity requires itapp/api/[route]/route.ts following existing route structurecn(), formatDate(), etc.) — don't duplicate themPython/FastAPI:
Depends() usage)get_db dependency)print()Python/Django:
Write tests for every acceptance criterion. Tests are not optional.
Test coverage rule: Every AC must have at least one test that would fail if the AC is not implemented.
Test structure:
For each acceptance criterion:
- Happy path test (the Given/When/Then scenario as written)
- Edge case tests (boundary values, empty inputs, max length)
- Error case tests (invalid inputs, unauthorized access, network errors)
Test quality:
test_registration_with_duplicate_email_returns_409Running tests: Run all tests (not just the new ones) to confirm no regressions. If tests are failing before your changes, document this — do not mask pre-existing failures.
Before marking the story "done", complete this checklist:
See references/story-dod-checklist.md for the full checklist.
Quick summary:
Requirements:
Code quality:
Tests:
Story administration:
If any item cannot be checked off, do not mark the story "done". Either fix the issue or document the blocker clearly.
Halt immediately and report when:
When reporting a blocker:
BLOCKED: [Brief description]
Attempting to implement: [What you were doing]
The problem: [Specific issue]
What I explored: [What you checked]
What I need: [Specific information or decision needed to proceed]
When the story is done, provide this summary:
## Story Complete: [Story ID and Title]
All acceptance criteria met:
- AC 1: [How it was implemented]
- AC 2: [How it was implemented]
...
Files created:
- [file path] — [purpose]
Files modified:
- [file path] — [what changed]
Tests:
- [N] new tests added
- All [N] existing tests passing
Notes:
[Any deviations from the story plan, technical decisions made, or context for the next story]
This skill includes the following Claude Code-specific enhancements:
$ARGUMENTS
If a path is provided, read that story file. Otherwise search for the next "ready" story:
Glob: "docs/stories/**/*.md"
Then read each file to find one with Status: ready.
Use TaskCreate to track implementation phases:
TaskCreate: "Read and understand story" → comprehension phase
TaskCreate: "Explore codebase for context" → discover existing patterns
TaskCreate: "Implement story tasks" → one sub-task per technical task in the story
TaskCreate: "Write/update tests" → test coverage for all ACs
TaskCreate: "Run DoD checklist" → verification before marking done
Before writing any code, discover project commands:
# Check for Makefile targets
make help 2>/dev/null || cat Makefile | grep "^[a-z]"
# Check package.json scripts
cat package.json | grep '"scripts"' -A 20
# Check pyproject.toml
cat pyproject.toml | grep -A 10 "\[tool.pytest"
Before implementation, read existing code to match patterns:
Grep: pattern to find similar implementations in the codebase
Glob: "src/**/*.ts" or "**/*.py" to find relevant files
Read: key files to understand conventions
When you attempt to stop, an automated agent runs:
Blocked example:
⚠️ Implementation verification failed:
Tests: ❌ FAILED
- test_user_login: AssertionError — expected 200, got 401
Lint: ✅ PASSED
Story tasks: ⚠️ INCOMPLETE
- [ ] "Add JWT refresh endpoint" — still unchecked
Cannot mark implementation complete until all checks pass.
This skill handles both common SaaS stacks:
Next.js / TypeScript stack:
src/components/, pages in src/app/src/app/api/Python / FastAPI stack:
app/routers/, models in app/models/Match the stack discovered in docs/architecture.md or project files.
development
Generate comprehensive test suites with coverage analysis and parallel test writing. Automatically activates when users want to write tests, add test coverage, generate test cases, improve testing, or analyze coverage gaps. Supports pytest, vitest, jest, and all major test frameworks.
development
Multi-agent PR review team orchestration with 7 specialized reviewers for security-sensitive or architectural PRs. Spawns architecture, security, performance, testing, style, docs/UX, and adversary reviewers as a coordinated team. Premium review for critical code changes.
development
Spec-driven team orchestration: adaptive development team scaling from 3 to 11 agents based on complexity.
development
Perform comprehensive security review targeting OWASP Top 10 2025 vulnerabilities for PRs, commits, or entire codebases. This skill should be used when a user wants to audit code security, scan for vulnerabilities, review security posture, or check for OWASP compliance. Analysis only - identifies vulnerabilities without modifying code.