plugins/github-copilot-modernization/skills/team-charters/SKILL.md
Provides role charters (mission, ownership, core principles, quality bar) for a multi-agent coding team. Each charter defines the role's mission, ownership scope, core principle (boundary constraints), and quality bar. Most roles also include communication rules. Consumed by the coordinator during task decomposition to assign work to the correct role. Triggers: "look up role charter", "what does the architect own", "check role boundaries", "find team roles", "which role handles X", "list agent charters", "role responsibilities". NOT for: task decomposition (use breaking-down-tasks), implementation (use implementing-code), architecture analysis (use analyzing-architecture).
npx skillsauth add microsoft/github-copilot-modernization team-chartersInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Defines the mission, ownership, core principles, quality bar, and (for most roles) communication rules for each role in a multi-agent coding team. Each charter is a reference file under references/.
| Role | Mission | Charter |
|---|---|---|
| architect | Own the technical blueprint: how the system is built, how it should be rebuilt, whether the implementation follows the design, and build verification (smoke test) | references/architect.md |
| backend | Own the server-side implementation: build the logic that powers the product | references/backend.md |
| dba | Own the data layer: make sure data is modeled correctly, stored safely, and migrates reliably | references/dba.md |
| devops | Own CI/CD pipelines, deployment automation, and operational infrastructure | references/devops.md |
| frontend | Own the client-side implementation: build what the user sees and interacts with | references/frontend.md |
| pm | Own the product definition: what features exist, what needs to be built, and whether the delivered result matches | references/pm.md |
| security | Audit and verify security posture — find vulnerabilities and escalate, do NOT fix them | references/security.md |
| teamlead | Own the execution blueprint and quality gates: constitution, implementation plans, testing strategies, task breakdowns, and gate verdicts | references/teamlead.md |
| tester | Own runtime-validation execution: verify that the system works correctly by executing the approved testing strategy through integration and end-to-end testing | references/tester.md |
| ux | Own user experience design: how users interact with the system, what they see, and how information is organized | references/ux.md |
To look up a specific role's charter, read references/<role>.md. Each charter contains:
development
Scan dependency manifests against known CVEs and remediate by upgrading vulnerable dependencies to patched versions, then rebuild and re-scan to confirm. Self-contained scan→fix→verify loop for any project with a dependency manifest. Use when: a cve-remediation task is dispatched; dependency set changed (version bump, new framework); assessment flagged vulnerable or EOL dependencies; or user asked to "fix CVEs", "patch vulnerabilities", or "dependency security". Triggers: "cve", "remediate cve", "fix cves", "patch vulnerable dependencies", "vulnerability scanning", "dependency security", "vulnerable dependencies", "security advisories", "npm audit", "pnpm audit", "maven audit", "gradle audit", "dependency scan", "vulnerability remediation". NOT for: security audit of auth/input/secrets/OWASP code paths (use security-review).
development
Generate dependency map diagram from project build files
documentation
Generate data architecture and persistence layer documentation with data model diagram
documentation
Generate core business workflow documentation with sequence diagram