external/sentry-security-review/sred-work-summary/SKILL.md
Go back through the previous year of work and create a Notion doc that groups relevant links into projects that can then be documented as SRED projects.
npx skillsauth add seikaikyo/dash-skills sred-work-summaryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
4 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Collect all the Github PRs, Notion docs and Linear tickets a person completed in a given year. Group the links from all of those into projects. Put everything into a private Notion document and return a link to that document.
Before starting make sure that Github, Notion and Linear can be accessed. Notion and Linear should be connected using an MCP. Github can be connected with an MCP, but if you have access to the gh CLI tool, you can use that instead.
If any of these can't be accessed, prompt the user to grant access before proceeding.
# Get the current year
date +%Y
The output of this command is the current year. The current year minus one is the previous year.
Collect all of the required information from the user:
Github Username: What is the github username of the user?
Github Repositories: Which Github repositories should be searched for PRs?
The user can either specify a comma separated list, or provide a directory that contains repositories. In the second case use this command in the specified directory:
# Find github repos
find . -maxdepth 2 -name ".git" -type d | sed 's/\/.git$//' | sort
Ensure:
getsentry Github organization.The output of this is hereafter referred to as the "user repos".
Incidents: Ask if the user wants to include incident documents.
The answer is either yes or no. If the answer is no, that will exclude certain documents from the search later on.
Other Users: Ask if there are any other users who might have created Notion documents.
This should be a comma separated list of names. Remember this as the "other users".
Create a private Notion document entitled "SRED Work Summary [current year]". This document will be referred to as the Work Summary.
If a document with this name already exists, notify the user to rename the existing document and stop executing.
Ensure:
The time window is Feb. 1 of the previous year until Jan. 31 of the current year
Find all Github PRs created by the given github username in the time window for the user repos.
If the user does not want to include incident documents, ignore any Github PRs with INC-X, inc-X in the title or description.
Use either the Github MCP or the gh command to do this.
Find all the Notion documents the user created in the time window.
If the user does not want to include incident documents, ignore any Notion Documents with INC-XXXX in the title.
Use the Notion MCP to do this.
Find all the Linear tickets the user was assigned in the time window.
If the user does not want to include incident documents, ignore any Linear tickets with INC-XXXX in the title.
Use the Linear MCP to do this.
Ensure:
For each of the Github PRs, Notion documents and Linear tickets found in Step 4, put a link into the private document created in Step 3.
Ensure:
Use your own intelligence to group all the Github, Notion and Linear ticket links in the Work Summary document into projects. The format of this document is shown below.
# Projects
## [Project Name]
*Summary*: [X] PRs, [X] Notion docs, [X] Linear tickets
### Pull Requests [X]
*[repository name]
[Links to all the PRs]
- [link] - [Merge date]
### Notion Docs [X]
[Links to all the Notion docs]
- [link] - [Creation date]
### Linear Tickets [X]
- [link] - [Creation date]
For Github PRs, use both the title of the PR and the description of the PR for grouping. For Notion documents, use the full document for grouping. For Linear tickets use the title of the ticket and the description of the ticket.
Ensure:
Search for notion documents created by the "other users". Take any that are relevant to the projects in the Work Summary and add links to those Notion documents into the Work Summary in the appropriate project.
Return a link to the Work Summary Notion doc to the user.
Ensure:
This is an example Working Summary document for the year 2025: https://www.notion.so/sentry/Work-Summary-Feb-2025-Jan-2026-3068b10e4b5d81d3a40cfa6ad3fe1078?source=copy_link
development
拋棄式 HTML mockup 比稿:產出 2 到 3 個設計立場不同的變體(密度 / 版式 / 強調軸,不是換色),各附取捨說明,最後給有立場的對比結論。適用:「畫個草圖」「比較 A 版 B 版」「先看方向再做」「給我看幾種做法」。要 production 元件或設計已定案時不適用。
tools
需求不明時的意圖萃取訪談:一次一題、每題附上自己的猜測、聽出「真正想要 vs 覺得應該要」,直到能預測使用者反應(約 95% 信心)才動工。適用:需求缺少對象 / 動機 / 成功標準 / 約束,或使用者點名「訪談我」「先確認一下」「我們確定嗎」。明確自足的指示、純資訊查詢、機械性操作不適用。
development
對非平凡決策啟動新鮮 context 對抗審查(找碴不背書),在修正還便宜的時候抓出錯誤方向。適用:高風險改動(production、資安敏感邏輯、不可逆操作)、不熟的程式碼、要宣稱「這樣是安全的 / 可行的」之前。機械性操作與一行修改不適用。
testing
Reference for writing and editing agent skills well — the vocabulary and principles that make a skill predictable. Consult when authoring, reviewing, or pruning a SKILL.md.