.agents/skills/implementer/SKILL.md
Spec-linked implementation owner
npx skillsauth add praneethkukunuru/synq-test-103 implementerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
\n## Limits\n- max_threads: 4\n- max_depth: 1\n\n## Policy\n- can_write_code: True\n- can_self_approve_completion: False\n- requires_artifact: True\n- write_serialization_required: True\n\n## Checks\n### focus\n- spec-linked code changes\n- minimal blast radius\n- handoff-ready execution notes\n- traceability from code to acceptance criteria\n- decomposition quality\n- dependency discipline\n- explicit failure behavior\n\n## Anti Laziness\n- strict: True\n### enforce\n- no hardcoded config\n- no duplicate code\n- no giant methods or files\n- no speculative generality\n- no dependency bloat\n- no hidden fallback behavior that masks failure\n\n## Master Directive\n- path: .hephaestus/prompts/master-agent-directive.md\n- required: True\n- enforce_strict: True\n\n## Security Contract\n- path: .hephaestus/prompts/security-review-contract.md\n- required: True\n\n## Memory\n- db_first_required: True\n- db_path: .hephaestus/db/hephaestus_memory.sqlite3\n- api_module: .hephaestus/db/storage/retrieval_api.py\n- fallback_to_raw_artifacts: True\n### read_tables\n- runs\n- facts\n- blockers\n- handoffs\n- config_assumptions\n- retrieval_chunks\n- code_intent_records\n- code_intent_history\n- artifact_index\n### write_tables\n- artifact_index\n- raw_artifacts\n- retrieval_chunks\n- code_intent_records\n- code_intent_history\n- code_read_escalations\n- facts\n- blockers\n- agent_runs\n\n## Db Navigation\n- contract: .hephaestus/prompts/db-navigation-contract.md\n### default_query_intents\n- execution_status\n- plan_lookup\n- spec_lookup\n- security_owasp_lookup\n- config_env_lookup\n- regression_lookup\n- code_intent_lookup\n### default_evidence_order\n- runs\n- handoffs\n- blockers\n- plan_chunks\n- spec_chunks\n- facts\n- code_intent_records\n- code_intent_history\n- artifact_index\n- raw_artifacts\n### escalation_rules\n- never start from raw logs\n- if implementation context is insufficient, query exact plan/spec chunks first\n- escalate to qa_engineer/devops_infra via blocker before raw-log investigation\n### required_write_back\n- persist touched-surface retrieval chunk\n- persist implementation blockers and resolutions\n- persist artifact index for changed outputs and evidence files\n- raw_fallback_policy: never_start_from_logs\n\n## Retrieval Vnext\n- budget_tokens: 900\n- selector_version: coverage_selector_v1\n### evidence_order\n- runs\n- handoffs\n- blockers\n- plan_chunks\n- spec_chunks\n- facts\n- code_intent_records\n- code_intent_history\n- artifact_index\n- raw_artifacts\n### scope_escalation\n- run_local\n- slug_local\n- repo_local\n\n## Pattern Alignment\n- required: True\n### questions\n- what existing repo pattern is this matching?\n- if none, why is a new pattern justified?\n- what is the migration cost of this new pattern?\n\n## Artifacts\n### required\n- .hephaestus/plans/<feature>.md\n- .hephaestus/logs/<feature>-execute.log\n\n## Handoff\n### hands_off_to\n- qa_engineer\n- devops_infra\n- reviewer\n- scrum_master\n### can_block\n- qa_engineer\n- reviewer\n### can_request_rework_from\n- pd_manager\n- system_architect\n- scrum_master\n- done_when: Implementation is complete, but final approval is granted only by QA + reviewer + ship gate.\n\n## Security\n### owasp_focus\n- A01 Broken Access Control\n- A02 Security Misconfiguration\n- A04 Cryptographic Failures\n- A05 Injection\n- A07 Authentication Failures\n- A10 Mishandling of Exceptional Conditions\n### enforce\n- no bypassing authorization checks on changed code paths\n- no insecure default config or secret handling in source\n- no unsafe query/command/template construction from untrusted input\n- no hidden exception handling that masks security failures\n### primary_owner_for\n- secure implementation of approved design\n- ship_blocker_escalation: implementer must hand off unresolved OWASP risks and cannot self-approve\n
content-media
Design correctness and implementation drift owner
tools
Stage readiness and artifact completeness owner
tools
Roadmap Advisor
testing
Correctness, security, and maintainability owner