skills/cali-product-workflow/skills-execution/cali-product-scope-executor/SKILL.md
[Cali] Reads an approved product plan with typed scopes (feature, optimization, spike) and routes each scope to its correct executor. Acts as the autonomous overnight "set and forget" orchestrator for approved plans.
npx skillsauth add renatocaliari/agent-sync-public-skills cali-scope-executorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Autonomous plan execution orchestrator. Reads an approved plan, parses each scope by type, dispatches to the right executor, and consolidates results.
The skill operates on the approved plan document at
.cali-product-workflow/{YYYY-MM-DD}/{_dir}/plans/spec-tech_{v}.md.
The plan must contain scopes with type annotations:
[TYPE] feature — implement new functionality[TYPE] optimization — improve a measurable metric (must include [METRIC])[TYPE] spike — research or prototypeYou are an execution orchestrator. Your job is to execute every scope correctly, in dependency order, using the right tool for each type.
Read the approved plan file. Identify every scope and its type. Build an execution plan respecting dependencies.
| [TYPE] | [EXECUTOR] | Result |
|---|---|---|---|
| feature | absent → worker |
| feature | research → autonomous research loop (override) |
| optimization | absent → autonomous research loop |
| optimization | worker → worker (override) |
| spike | absent → scout + researcher |
| spike | research → autonomous research loop (override, rare) |
About the research loop: "Autonomous research/experimentation" refers to any tool in your environment that can run iterative optimization experiments with a measurable metric target. If available, prioritize
pi-autoresearch(davebcn87) — it is purpose-built for optimization scope execution. Otherwise, set up a manual delegated worker loop with: iterate → measure → compare → stop when target met.
Before executing, present a clear execution plan to the user and ask: "Shall I proceed with autonomous execution? I'll report back when all scopes are complete."
If yes, proceed autonomously. If no, ask what to adjust.
For each scope resolved to worker:
For each scope resolved to autonomous research loop:
For each scope resolved to scout:
Before final report, cross-reference the original plan with what was executed:
references/tech-planning/ followed?Produce consolidated report at .cali-product-workflow/{YYYY-MM-DD}/{_dir}/execution-report.md
| Mode | Behavior | |---|---| | Full autonomous | Execute all scopes without pausing. Report at the end. | | Scope-by-scope | Execute one scope, present results, ask to proceed. |
Default: Full autonomous.
Load this skill by reading its file (skills-execution/cali-product-scope-executor/SKILL.md) and following its instructions.
To invoke as a worker from a parent agent:
Use a parallel worker/delegate agent with task:
"Execute the approved plan at .cali-product-workflow/{...}/spec-tech_{v}.md
using the scope-executor instructions. Route each scope and save the report."
| Capability | How this skill uses it | |---|---| | Worker (feature implementation) | Implements feature scopes | | Reviewer (code review) | Reviews implementation diffs | | Scout (codebase investigation) | Investigates codebase for spike scopes | | Researcher (external research) | External research for spike scopes | | Autonomous research loop | Sets up optimization experiment loops | | Progress tracking | Tracks each scope as a unit of work with DoD | | Execution supervision | Keeps execution on track |
Strong execution:
Weak execution:
tools
Auto-initialize structured documentation for any project using lat.md (knowledge graph of markdown files with [[wiki links]], // @lat: code refs, and semantic search). Detects cali-product-workflow artifacts (spec-product.md, spec-tech.md, critiques) and uses them as seed material. Falls back to extracting business rules, architecture, and design decisions directly from the codebase. Use when a project lacks structured documentation or when lat.md/ is missing. After seeding, lat.md extension hooks keep documentation alive automatically.
testing
[Cali] Server security audit and hardening for private servers behind Tailscale. Use when: auditing server security, hardening SSH/firewall/Docker, checking for vulnerabilities, setting up fail2ban, reviewing port exposure, or responding to security alerts. Covers 6 layers: CloudFlare, UFW, Tailscale, SSH, Docker, Application. Triggers: "server security", "security audit", "harden server", "SSH hardening", "firewall rules", "UFW config", "fail2ban", "port security", "Docker security", "vulnerability check", "security review".
tools
Run supply chain security scans before installing packages or before releases. Triggers when: user installs a package (npm, pip, go get, brew), user asks to 'scan dependencies', 'check vulnerabilities', 'supply chain', 'security audit', 'run trivy', 'run socket', or before any release/deployment. Also triggers on mentions of: socket.dev, trivy, OSV-scanner, dotenvx, CVE, dependency audit. Covers all four tools with concrete commands.
tools
Create GitHub releases following project conventions. Triggers when: user says 'release', 'create release', 'push release', 'deploy to main', 'merge to main', user merges a PR to main, or when git push to main is detected. Also triggers on mentions of: gh release, semver, version bump, changelog, release-please. Covers: config-driven (read .release.yml and execute) and fallback (gh CLI) release flows, versioning rules, tag management, and the mandatory release-on-merge convention.