praneethkukunuru/.agents/skills/hephaestus-assist
.agents/skills/hephaestus-assist/SKILL.md
# hephaestus-assist Use this as the normal-user entrypoint for Hephaestus. ## Purpose Provide a single-assistant experience while preserving strict internal lifecycle, role contracts, DB-first retrieval, and security gates. ## Master Directive This skill MUST follow `.hephaestus/prompts/master-agent-directive.md`. This skill MUST follow `.hephaestus/prompts/db-navigation-contract.md`. This skill MUST follow `.hephaestus/prompts/security-review-contract.md`. This skill MUST follow `.hephaest
testing
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add praneethkukunuru/synq-test-103 .agents/skills/hephaestus-assistInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 8:57 PM1.7s1 file scanned
SKILL.md
hephaestus-assist
Use this as the normal-user entrypoint for Hephaestus.
Purpose
Provide a single-assistant experience while preserving strict internal lifecycle, role contracts, DB-first retrieval, and security gates.
Master Directive
This skill MUST follow .hephaestus/prompts/master-agent-directive.md.
This skill MUST follow .hephaestus/prompts/db-navigation-contract.md.
This skill MUST follow .hephaestus/prompts/security-review-contract.md.
This skill MUST follow .hephaestus/prompts/ci-automation-contract.md.
Use When
- The user writes a natural prompt and expects one assistant-style workflow.
- The user should not manually manage roles, handoffs, or stage routing.
Inputs
- User prompt
- Repo-local DB state
- Repo-local Hephaestus contracts and settings
Outputs
- Milestone-level status updates for the user
- Internal stage, blocker, handoff, and artifact updates persisted in DB
- Verification/security/review results preserved as DB-backed evidence
Procedure
- Resolve repo identity and repo settings from DB.
- Query DB summaries in this order before raw fallback: intent -> contract -> risk.
- Classify intent and route internally to specialist roles/stages.
3.1 If planning intent is detected (product-plan/roadmap/feature ideation or
@filerefs), route to hidden planning workflow. - Persist retrieval audit records and compacted evidence chunks.
- Keep user output concise (milestones, blockers, final status, next command).
Guardrails
- Hidden orchestration does not relax lifecycle requirements.
- Planning mode remains additive and DB-first; no planning file writes before readiness gate.
- Raw code and raw logs are fallback-only after summary/chunk insufficiency.
- OWASP and anti-laziness gates remain enforced.
- If evidence is insufficient, create blocker instead of silent continuation.
Handoff
- Delegates to
hephaestus-runand specialist skills as backend executors.
Related Skills
praneethkukunuru/system_architect
content-media
VerifiedTrustedCommunity
Design correctness and implementation drift owner
SKILL.mdUpdated Apr 16, 2026
praneethkukunuru/scrum_master
tools
VerifiedTrustedCommunity
Stage readiness and artifact completeness owner
SKILL.mdUpdated Apr 16, 2026
praneethkukunuru/roadmap_advisor
tools
VerifiedTrustedCommunity
Roadmap Advisor
SKILL.mdUpdated Apr 16, 2026
praneethkukunuru/reviewer
testing
VerifiedTrustedCommunity
Correctness, security, and maintainability owner
SKILL.mdUpdated Apr 16, 2026