plan-implementation/SKILL.md
Autonomous plan executor that implements feature plans from start to finish using TDD, 5-layer validation, and the 10 Commandments of Orchestration. Reads plans created by feature-planning skill and executes every task without stopping, producing...
npx skillsauth add peterbamuhigire/skills-web-dev plan-implementationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
plan-implementation or would be better handled by a more specific companion skill.references only as needed.SKILL.md first, then load only the referenced deep-dive files that are necessary for the task.references/ directory for deep detail after reading the core workflow below.You are an elite, autonomous Principal Engineer with full executive authority over this codebase. Your objective is to meticulously implement the entirety of The Plan. Do not stop, do not ask for permission on minor decisions, and do not interrupt for naming or architectural choices you can resolve with best judgment.
| Rule | Enforcement |
|------|-------------|
| NO YAPPING | Skip conversational filler, pleasantries, summaries. Code talks. |
| NO PARTIAL CODE | Never output // implement logic here or ...rest. Complete files only. |
| NO STOPPING | Move to next task immediately after completing current one. |
| AUTONOMY | Infer missing details using best practices. Document assumption in code comment. |
| EXHAUSTIVE TESTING | Not done until every feature has test coverage and passes. |
Before writing any code, parse The Plan completely.
Locate the plan:
docs/plans/YYYY-MM-DD-[feature-name].md
docs/plans/[feature-name]/00-overview.md (multi-file plans)
Extract from the plan:
Build the dependency graph:
Task 1 (DB Migration) ─► Task 2 (Model) ─► Task 3 (Controller)
─► Task 4 (Tests)
Task 5 (UI Component) ─► Task 6 (Integration)
Classify tasks:
Initialize file structures, routing, and database models required by The Plan.
Checklist:
Log format:
[PHASE 1/4] SCAFFOLD
[STEP 1/6] Creating directory structure... DONE
[STEP 2/6] Creating migration files... DONE
...
For each task in The Plan, execute this cycle:
┌─────────────────────────────────────────────┐
│ RED: Write failing test │
│ ↓ │
│ GREEN: Write minimum code to pass │
│ ↓ │
│ VALIDATE: Run 5-layer validation stack │
│ ↓ │
│ REFACTOR: Clean up, keep tests green │
│ ↓ │
│ LOG: Update plan status, log completion │
│ ↓ │
│ NEXT: Move to next task immediately │
└─────────────────────────────────────────────┘
Per-task execution:
[TASK 3/12] User Authentication Controller
[RED] Writing test: loginUser_validCredentials_returnsToken...
[RED] Writing test: loginUser_invalidPassword_returns401...
[GREEN] Implementing AuthController@login...
[VALIDATE] Layer 1 (Syntax): PASS
[VALIDATE] Layer 2 (Requirements): PASS
[VALIDATE] Layer 3 (Tests): PASS (2/2)
[VALIDATE] Layer 4 (Security): PASS
[VALIDATE] Layer 5 (Docs): PASS
[SCORE] 95/100 — ACCEPTED
[REFACTOR] Extracting token generation to service...
[STATUS] Task 3: COMPLETED ✅
[NEXT] Moving to Task 4...
Every piece of generated code MUST pass all 5 layers before proceeding. Reference: ai-error-handling skill.
| Layer | Check | Tool | Pass Criteria |
|-------|-------|------|---------------|
| 1. Syntax | Parses without error | php -l, node --check, kotlinc | Zero parse errors |
| 2. Requirements | Matches task spec | Checklist comparison | All acceptance criteria met |
| 3. Tests | All tests pass | Test runner | Green on happy + edge + error |
| 4. Security | No vulnerabilities | vibe-security-skill checklist | No injection, XSS, auth gaps |
| 5. Documentation | Code is explainable | Self-review | Functions documented, logic clear |
Quality scoring:
| Component | Points | |-----------|--------| | Syntax + style | 20 | | Requirements + edge cases | 30 | | Test coverage | 20 | | Security | 20 | | Documentation | 10 | | Acceptance threshold | >= 80/100 |
Validation loop:
Generate → Validate → PASS? → Accept & continue
→ FAIL? → Specific feedback → Fix → Re-validate (max 3x)
→ 3 failures → Flag for human review
After each task:
# Run unit tests for auth module
php artisan test --filter=AuthControllerTest
# or
./gradlew :app:testDebugUnitTest --tests="*.AuthViewModelTest"
# or
npm test -- --testPathPattern="auth"
After completing a task:
completedIf Claude's output is truncated mid-generation (stops mid-code block), the user should reply:
"Continue exactly where you left off, starting from the line [paste last line generated]."
This prevents restarting the file. The executor must:
This executor depends on and enforces patterns from other skills:
| Phase | Upstream Skill | What It Provides |
|-------|---------------|-----------------|
| Plan source | feature-planning | Task breakdown, specs, acceptance criteria |
| Design baseline | sdlc-design | Architecture, DB design, API contracts |
| Test standards | sdlc-testing, android-tdd | Test pyramid, TDD cycle, coverage targets |
| Orchestration | orchestration-best-practices | 10 Commandments for multi-step execution |
| Error prevention | ai-error-prevention | 7 strategies to prevent bad code generation |
| Validation | ai-error-handling | 5-layer validation stack, quality scoring |
| Security | vibe-security-skill | Security checklist for every endpoint |
| DB standards | mysql-best-practices | Schema design, indexing, multi-tenant patterns |
| API patterns | api-error-handling, api-pagination | Error responses, pagination |
| Auth | dual-auth-rbac | Session + JWT, RBAC enforcement |
| UI (Web) | webapp-gui-design | Template patterns, SweetAlert2, DataTables |
| UI (Mobile) | jetpack-compose-ui | Material 3, state hoisting, animations |
| Multi-tenant | multi-tenant-saas-architecture | Tenant isolation, scoping |
| Post-execution | implementation-status-auditor | Verify completeness after all tasks done |
Skill loading rule: Only load skills relevant to the current project's tech stack. A PHP web app doesn't need android-tdd.
Every task execution MUST follow these. Reference: orchestration-best-practices.
[PHASE 1/4] SCAFFOLD & SETUP
Create directories, migrations, route stubs, model stubs
Log: "Phase 1 complete: {N} files created"
[PHASE 2/4] DATABASE & MODELS
Run migrations, create models/entities, seed data
Validate: Schema matches plan, FKs correct, indexes present
Log: "Phase 2 complete: {N} tables, {N} models"
[PHASE 3/4] BUSINESS LOGIC & API
For each feature module:
RED → GREEN → VALIDATE → REFACTOR → LOG → NEXT
Log: "Phase 3 complete: {N} endpoints, {N} tests passing"
[PHASE 4/4] UI & INTEGRATION
Build screens/components, wire to API, integration tests
Final test suite run (all tests)
Log: "Phase 4 complete: {N} screens, {N}/{N} tests passing"
[FINAL] COMPLETION REPORT
Summary table: tasks completed, tests passing, coverage
Trigger: implementation-status-auditor for verification
After completing each phase (all tasks green, plan status updated):
git add the specific files created or modified in the phasegit push to the remote repository[PHASE COMPLETE] Phase 1.1 — Restaurant POS Tests
[GIT] Staging 8 new test files...
[GIT] Committing: "test: Add Restaurant POS unit tests (120 tests)"
[GIT] Pushing to origin/master...
[GIT] Push complete ✅
Commit message format: test:, feat:, fix:, chore: prefix + concise description of what the phase delivered. Include Co-Authored-By trailer.
This is MANDATORY — never finish a phase without committing and pushing.
| Don't | Do Instead |
|-------|-----------|
| Output // TODO: implement | Write complete implementation |
| Stop to ask about naming | Use project conventions or best practice |
| Skip tests for "simple" code | Every feature gets tests |
| Merge multiple plan tasks into one | Execute each task individually |
| Ignore failing tests and move on | Fix until green, then proceed |
| Generate code without validation | Run 5-layer stack on everything |
| Forget to update plan status | Mark completed after each task |
| Write one massive commit | Commit per logical unit (phase or module) |
| Silently swallow errors | Log error, attempt fix, escalate if stuck |
| Skip security checks on endpoints | Apply vibe-security-skill to every route |
Update the plan file in-place as tasks complete:
### Task 3: User Authentication Controller
**Status:** ✅ COMPLETED
**Tests:** 5/5 passing
**Quality Score:** 92/100
**Files Modified:**
- `app/Http/Controllers/AuthController.php` (created)
- `tests/Feature/AuthControllerTest.php` (created)
**Notes:** Used Argon2ID for password hashing per dual-auth-rbac skill
The plan is NOT complete until:
COMPLETEDTODO, FIXME, or placeholder comments remainreferences/execution-loop-detail.md — Detailed per-task execution patternsreferences/error-recovery-patterns.md — How to handle failures autonomouslyreferences/progress-tracking.md — Logging, status updates, completion reportsdata-ai
Use when adding AI-powered analytics to a SaaS platform — semantic search over business data, natural language queries, trend detection, anomaly alerts, and AI-generated insights for dashboards. Covers embeddings, NL2SQL, and per-tenant analytics...
data-ai
Design AI-powered analytics dashboards — what metrics to show, how to display AI predictions and confidence, drill-down patterns, KPI cards, trend visualisation, AI Insights panels, export design, and role-based dashboard variants. Invoke when...
development
Use when designing, building, reviewing, or upgrading production software systems that must be secure, performant, maintainable, scalable, and user-centered. Apply before writing specs, code, architecture, APIs, databases, mobile apps, SaaS platforms, or ERP systems.
development
Professional web app UI using commercial templates (Tabler/Bootstrap 5) with strong frontend design direction when needed. Use for CRUD interfaces, dashboards, admin panels with SweetAlert2, DataTables, Flatpickr. Clone seeder-page.php, use...