microsoft/per-repo-conventions
skills/per-repo-conventions/SKILL.md
Use when starting work in any repository, and again at each work-phase transition (design, coding, debugging, verification, opening a PR). Loads the canonical per-repo-conventions guidance from foundation:docs/PER_REPO_CONVENTIONS.md — the discovery pattern for AGENTS.md, PR templates, CONTRIBUTING.md, and contextual files (PRINCIPLES.md, SMOKE_TESTS.md, KNOWN_ISSUES.md), plus the re-read cadence and verification gradient.
$ install --global
skillsauthnpx skillsauth add microsoft/amplifier-foundation per-repo-conventionsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 3, 2026, 3:18 AM92.6s1 file scanned
SKILL.md
- name:
- per-repo-conventions
- description:
- >
- foundation:
- docs/PER_REPO_CONVENTIONS.md — the discovery pattern for AGENTS.md,
Per-Repo Conventions
Before writing code, debugging, verifying, or opening a PR in any repository, discover and honor that repo's local conventions. You are a guest — read the house rules before changing the furniture.
Read foundation:docs/PER_REPO_CONVENTIONS.md and follow it. Re-read the
relevant parts at each major shift in what you are doing (design →
implementation, investigation → fix, coding → verification → PR): earlier reads
fall out of context, and each file reads differently through the lens of the
current objective.
That document is the single source of truth. It covers discovery order (repo
root + subdirectory walk, most-specific-wins), the always-loaded files
(AGENTS.md, .github/PULL_REQUEST_TEMPLATE.md, CONTRIBUTING.md,
README.md), the contextual files (PRINCIPLES.md, SMOKE_TESTS.md,
KNOWN_ISSUES.md), when to read and re-read them, the verification gradient,
and author guidance.
Related Skills
microsoft/creating-amplifier-modules
tools
VerifiedTrustedCommunity
Use when creating a new Amplifier module (tool, hook, orchestrator, context, or provider). Covers the mount() contract, protocol compliance validation, placeholder patterns, and the module directory structure. Prevents the common mistake of creating no-op mount() stubs that fail protocol_compliance validation.
15SKILL.mdUpdated Apr 16, 2026
microsoft/creating-amplifier-modules
tools
VerifiedTrustedCommunity
Use when creating a new Amplifier module (tool, hook, orchestrator, context, or provider). Covers the mount() contract, protocol compliance validation, placeholder patterns, and the module directory structure. Prevents the common mistake of creating no-op mount() stubs that fail protocol_compliance validation.
15SKILL.mdUpdated Apr 16, 2026
microsoft/bundle-to-dot
testing
VerifiedTrustedCommunity
Convention for the v3 bundle documentation system: a single bundle.dot + bundle.png per repo, generated by bundle_repo_dot(). Use when generating, validating, or interpreting bundle documentation files. Covers 7-cluster DOT structure, token cost model, color conventions, external reference distinction, freshness tracking via source_hash, generation recipes, and the lifecycle model.
15SKILL.mdUpdated Apr 16, 2026
microsoft/creating-amplifier-modules
tools
VerifiedTrustedCommunity
Use when creating a new Amplifier module (tool, hook, orchestrator, context, or provider). Covers the mount() contract, protocol compliance validation, placeholder patterns, and the module directory structure. Prevents the common mistake of creating no-op mount() stubs that fail protocol_compliance validation.
15SKILL.mdUpdated Apr 16, 2026