nwave-ai/nw-authoritative-sources
nWave/skills/nw-authoritative-sources/SKILL.md
Domain-specific authoritative source databases, search strategies by topic category, and source freshness rules
$ install --global
skillsauthnpx skillsauth add nwave-ai/nwave nw-authoritative-sourcesInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 9, 2026, 2:41 AM12.5s1 file scanned
SKILL.md
- name:
- nw-authoritative-sources
- description:
- Domain-specific authoritative source databases, search strategies by topic category, and source freshness rules
- user-invocable:
- false
- disable-model-invocation:
- true
Authoritative Sources
Domain Authority Database
Supplements general reputation tiers in source-verification with domain-specific authorities.
Software Architecture
| Source | Authority | Notes | |--------|-----------|-------| | martinfowler.com | Primary | Patterns, refactoring, enterprise architecture | | c2.com/wiki | Historical | Original wiki; pattern language origins | | microservices.io | Domain-specific | Chris Richardson's microservices patterns | | architecturenotes.co | Curated | ADRs and trade-off analysis | | infoq.com | Industry reporting | Conference talks, practitioner reports | | thoughtworks.com/radar | Trend tracking | Technology Radar adoption lifecycle |
Cloud Platforms
| Source | Authority | Notes | |--------|-----------|-------| | docs.aws.amazon.com | Official | AWS, well-architected framework | | cloud.google.com/docs | Official | GCP services and practices | | learn.microsoft.com | Official | Azure, .NET, Microsoft ecosystem | | kubernetes.io/docs | Official | Container orchestration | | docs.docker.com | Official | Container runtime |
Security
| Source | Authority | Notes | |--------|-----------|-------| | owasp.org | Standards body | Web app security, top-10 | | nist.gov | Government | NIST CSF, SP 800 series | | cve.mitre.org | Vuln database | CVE identifiers | | nvd.nist.gov | Vuln database | NVD with scoring | | csrc.nist.gov | Crypto standards | FIPS, module validation | | cisa.gov | Government advisory | Security advisories |
Standards Bodies
| Source | Authority | Notes | |--------|-----------|-------| | ietf.org / datatracker.ietf.org | Protocol standards | RFCs: networking, HTTP, TLS, DNS | | w3.org | Web standards | HTML, CSS, WCAG, web APIs | | iso.org | International | Quality, security, process frameworks | | ecma-international.org | Language standards | ECMAScript spec | | unicode.org | Character standards | Unicode encoding |
Programming Languages and Frameworks
| Source | Authority | Notes | |--------|-----------|-------| | docs.python.org | Official | Python, stdlib, PEPs | | go.dev/doc | Official | Go language, stdlib | | typescriptlang.org | Official | TypeScript handbook | | rust-lang.org/learn | Official | Rust book, reference | | developer.mozilla.org (MDN) | Canonical web ref | JS, HTML, CSS, Web APIs | | docs.oracle.com/javase | Official | Java spec, API docs |
Data and Databases
| Source | Authority | Notes | |--------|-----------|-------| | postgresql.org/docs | Official | PostgreSQL | | dev.mysql.com/doc | Official | MySQL | | redis.io/docs | Official | Redis | | mongodb.com/docs | Official | MongoDB | | cassandra.apache.org/doc | Official | Cassandra |
DevOps and SRE
| Source | Authority | Notes | |--------|-----------|-------| | sre.google | Industry | Google SRE books | | 12factor.net | Methodology | Twelve-factor app | | dora.dev | Research | DORA metrics | | openpolicyagent.org | Policy-as-code | OPA docs |
Domain-Specific Search Strategies
Architecture Topics
- Canonical authors:
{topic} site:martinfowler.comorsite:microservices.io - Conference talks:
{topic} QCon OR StrangeLoop OR GOTO conference - Books/papers:
{topic} book OR paper architecture - Adoption status:
{topic} site:thoughtworks.com/radar - Local docs: Grep in
docs/research/andnWave/skills/
Security Topics
- Vuln databases:
{topic} site:cve.mitre.orgorsite:nvd.nist.gov - Advisories:
{topic} site:cisa.govorsite:owasp.org - NIST frameworks:
{topic} site:nist.gov - Vendor advisories if product-specific
- Prioritize last 6 months
Framework and Library Topics
- Official docs (see database above)
- Release notes/changelogs for version-specific info
- Migration guides:
{framework} migration guide {version} - GitHub issues/discussions for known problems
- Stack Overflow:
{topic} site:stackoverflow.com
Methodology and Process Topics
- Original author/publication
- Case studies:
{methodology} case study OR experience report - Critiques:
{methodology} criticism OR alternative OR comparison - Academic:
{topic} site:arxiv.orgor Google Scholar - Practitioner adaptations vs original definitions
Source Freshness Rules
| Category | Max Age | Rationale | |----------|---------|-----------| | Security vulnerabilities | 6 months | Rapid threat evolution | | Framework versions | 1 year | API/practice changes | | Cloud service docs | 1 year | Frequent deprecation/launch | | API references | 1 year | Breaking changes common | | Architecture patterns | Evergreen | Core patterns stable | | Methodology references | Evergreen | Foundational works stable | | Language specs | Evergreen per version | Per-version permanent | | Research papers | 3 years | Check for follow-up work | | Industry trend reports | 1 year | Cite current edition only |
Handling Outdated Sources
- Check if newer version exists
- Stable concept: cite with "[Published {year}; concept remains current]"
- Time-sensitive: find current source or document age limitation in Knowledge Gaps
- Never cite outdated security advisories as current threat intelligence
Related Skills
nwave-ai/nw-distill
testing
VerifiedTrustedCommunity
Acceptance test creation methodology for the DISTILL wave. Domain knowledge for the acceptance designer agent: port-to-port principle, prior wave reading, wave-decision reconciliation, graceful degradation, and document back-propagation.
563SKILL.mdUpdated May 21, 2026
nwave-ai/nw-collaboration-and-handoffs
development
VerifiedTrustedCommunity
Cross-agent collaboration protocols, workflow handoff patterns, and commit message formats for TDD/Mikado/refactoring workflows
563SKILL.mdUpdated Apr 16, 2026
nwave-ai/nw-roadmap
development
VerifiedTrustedCommunity
Creates a phased roadmap.json for a feature goal with acceptance criteria and TDD steps. Use when planning implementation steps before execution.
563SKILL.mdUpdated Apr 9, 2026
nwave-ai/nw-distill
testing
VerifiedTrustedCommunity
Acceptance test creation methodology for the DISTILL wave. Domain knowledge for the acceptance designer agent: port-to-port principle, prior wave reading, wave-decision reconciliation, graceful degradation, and document back-propagation.
563SKILL.mdUpdated Apr 9, 2026