plugins/github-copilot-modernization/skills/sharing-learnings/SKILL.md
How to record project learnings so that later-phase workers and future agent runs can consume them.
npx skillsauth add microsoft/github-copilot-modernization sharing-learningsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
This skill defines how a multi-agent run captures knowledge and feeds it back into later phases and future runs.
| Product | Path | Scope | Audience |
|---|---|---|---|
| Learnings | {{BASE_PATH}}/learnings/<role>/<slug>.md (git-tracked) | persistent across runs | later-phase agents in same run + future agents on this repo + humans |
Invoked by every worker during Preflight Step 2 (consume prior learnings) and Completion Phase (produce new learnings).
{{BASE_PATH}}/
└── learnings/<role>/<slug>.md ← per-topic, append-friendly, git-tracked
The directory tree + filename is the index. Each file's first three lines (H1 + blank + one-sentence description) are its scannable metadata. No separate index file needed.
list_dir {{BASE_PATH}}/learnings/<your-role>/ (and any cross-cutting roles relevant to your task).read_file the full body only for learnings that are relevant to your current task.Emit once after loading:
[learnings-loaded] <role>/<slug>, <role>/<slug>
Use (none) if nothing relevant was found. If a learning conflicts with your task or charter, [notify:coordinator] — do not silently ignore.
Every file under {{BASE_PATH}}/learnings/ MUST follow this shape:
# <Slug Title>
One-sentence description that future agents scan to decide relevance.
## What Happened
Narrative: what was discovered, what went wrong, what worked.
Cite the originating project + task ID.
## Takeaway
Concrete guidance for future tasks dealing with the same topic.
## Example (optional)
Minimal snippet illustrating the point.
## History
- <YYYY-MM-DD> (<project>/<taskId>): initial
- <YYYY-MM-DD> (<project>/<taskId>): added X based on new finding
Blank template: templates/learning.md.
Before finishing your task, evaluate what you learned and decided.
Mandatory — you MUST write a learning when any of these apply:
camelCase vs snake_case, tab width, import ordering)These learnings ensure style and architecture stay consistent across runs, even if the choice felt obvious.
Optional — write a learning when any of these apply:
Doing nothing is valid only if the task involved no style/architecture decisions and had no surprises.
war-packaging-for-jsp.md).{{BASE_PATH}}/learnings/<your-own-role>/. If you spot something that belongs to another role, use [notify:<that-role>] instead.## History entry rather than creating a duplicate. Add new details under the existing sections.Emit after writing (empty list is fine):
[learnings] written: [<role>/<slug>, ...]
development
Scan dependency manifests against known CVEs and remediate by upgrading vulnerable dependencies to patched versions, then rebuild and re-scan to confirm. Self-contained scan→fix→verify loop for any project with a dependency manifest. Use when: a cve-remediation task is dispatched; dependency set changed (version bump, new framework); assessment flagged vulnerable or EOL dependencies; or user asked to "fix CVEs", "patch vulnerabilities", or "dependency security". Triggers: "cve", "remediate cve", "fix cves", "patch vulnerable dependencies", "vulnerability scanning", "dependency security", "vulnerable dependencies", "security advisories", "npm audit", "pnpm audit", "maven audit", "gradle audit", "dependency scan", "vulnerability remediation". NOT for: security audit of auth/input/secrets/OWASP code paths (use security-review).
development
Generate dependency map diagram from project build files
documentation
Generate data architecture and persistence layer documentation with data model diagram
documentation
Generate core business workflow documentation with sequence diagram