raunakkathuria/buildwright
/SKILL.md
Lightweight engineering workflow for agent-led development. Provides plan, work, verify, ship, and analyse commands with TDD, documentation discipline, security review, code review, and quality gates.
$ install --global
skillsauthnpx skillsauth add raunakkathuria/buildwright buildwrightInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 26, 2026, 5:54 AM9.5s26 files scanned
SKILL.md
- name:
- buildwright
- description:
- Lightweight engineering workflow for agent-led development. Provides plan, work, verify, ship, and analyse commands with TDD, documentation discipline, security review, code review, and quality gates.
- license:
- MIT
- compatibility:
- Requires git and gh for shipping. Optional tools for security scans include semgrep, gitleaks, and trufflehog. Works with Claude Code, OpenCode, Cursor, and Codex CLI.
- homepage:
- https://github.com/raunakkathuria/buildwright
- version:
- 0.0.14
- author:
- raunakkathuria
Buildwright
Buildwright is a lightweight engineering discipline layer: understand, test, implement, document, verify, review, ship.
Commands
/bw-work
Implement bug fixes, refactors, and features.
Flow: understand -> research -> plan if needed -> Red -> Green -> Refactor -> docs -> verify -> security review -> code review -> commit/ship.
For larger features, /bw-work writes docs/specs/[feature]/research.md and
docs/specs/[feature]/spec.md. For small tasks, it keeps research lightweight.
Every user-facing change must update affected docs or state why no docs apply.
/bw-plan
Research a question or topic and produce a written deliverable. No source changes, commits, pushes, or PRs.
/bw-verify
Run project quality gates: typecheck, lint, test, and build. Commands come from
.buildwright/steering/tech.md when present; otherwise Buildwright detects and
writes them.
/bw-ship
Run verify, security review, Staff Engineer review, then commit, push, and open a PR. Shipping confirms documentation was updated or explicitly not applicable.
/bw-analyse
Analyse a brownfield codebase and write .buildwright/codebase/STACK.md,
ARCHITECTURE.md, CONVENTIONS.md, and CONCERNS.md. Also creates or updates
.buildwright/steering/tech.md with discovered stack and commands.
Steering
Buildwright recursively reads every .md file under .buildwright/steering/.
It installs one default steering file:
.buildwright/steering/philosophy.md— KISS, YAGNI, DRY, boring technology, fail fast, Red -> Green -> Refactor, documentation discipline, and financial code rules.
Project-specific steering is lazy-created:
tech.mdafter command and stack discovery.product.mdonly for greenfield work or explicit product context.
Personas
Buildwright uses prompt-based review personas:
- Staff Engineer for spec/code review.
- Security Engineer for security review.
Safety
Buildwright does not edit .env files, run destructive git operations, force
push, or merge PRs. It stages only files changed for the current work.
Related Skills
openclaw/openclaw-secret-scanning-maintainer
development
VerifiedTrustedCommunity
Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.
357,764SKILL.mdUpdated Apr 15, 2026
openclaw/openclaw-release-maintainer
development
VerifiedTrustedCommunity
Maintainer workflow for OpenClaw releases, prereleases, changelog release notes, and publish validation. Use when Codex needs to prepare or verify stable or beta release steps, align version naming, assemble release notes, check release auth requirements, or validate publish-time commands and artifacts.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/openclaw-qa-testing
development
VerifiedTrustedCommunity
Run, watch, debug, and extend OpenClaw QA testing with qa-lab and qa-channel. Use when Codex needs to execute the repo-backed QA suite, inspect live QA artifacts, debug failing scenarios, add new QA scenarios, or explain the OpenClaw QA workflow. Prefer the live OpenAI lane with regular openai/gpt-5.4 in fast mode; do not use gpt-5.4-pro or gpt-5.4-mini unless the user explicitly overrides that policy.
357,764SKILL.mdUpdated Apr 10, 2026
openclaw/openclaw-parallels-smoke
development
VerifiedTrustedCommunity
End-to-end Parallels smoke, upgrade, and rerun workflow for OpenClaw across macOS, Windows, and Linux guests. Use when Codex needs to run, rerun, debug, or interpret VM-based install, onboarding, gateway smoke tests, latest-release-to-main upgrade checks, fresh snapshot retests, or optional Discord roundtrip verification under Parallels.
357,764SKILL.mdUpdated Apr 10, 2026