sm17p/skill-hygiene
.cursor/skills/skill-hygiene/SKILL.md
Checklist for updating project skills when the codebase or workflow changes. Use when applying the skill-maintenance rule, after dependency upgrades or script/e2e/release/issue-format changes, or when the user asks how to keep skills up to date.
$ install --global
skillsauthnpx skillsauth add sm17p/amfig skill-hygieneInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 12:14 PM109.1s1 file scanned
SKILL.md
- name:
- skill-hygiene
- description:
- Checklist for updating project skills when the codebase or workflow changes. Use when applying the skill-maintenance rule, after dependency upgrades or script/e2e/release/issue-format changes, or when the user asks how to keep skills up to date.
Skill hygiene
When updating a skill (see .cursor/rules/skill-maintenance.mdc for when to do so), read the current skill file first and then apply the checks below for the relevant skill(s).
issue-refinement-triage
- Issue block template still matches issue-refinement-triage/SKILL.md.
- Label table matches the label table in that skill (same labels and "Use for" text).
- Workflow steps still reflect how open/closed issues and "My comments" are used.
wxt-svelte-extension
- Stack: Entrypoints, config path, srcDir/outDir match current layout.
- Scripts table: Commands and purpose match
package.json(dev, build, zip; Chrome vs Firefox). - Constraints: No new dev data, storage prefix, shadow DOM isolation still accurate; wording matches current issues if referenced.
- reference.md: Known-issues list (e.g. #36, #17, #25) is current; add new recurring issues that should guide code, remove or note when an issue is closed.
releases-changesets
- Rule and "Add a changeset" steps match
.changeset/config.jsonand how the repo uses changesets. - Release steps (build:all, zip:all, workflow_dispatch) match current process; update when CI or release automation changes.
e2e-playwright-extension
- Layout: Paths (e2e/tests, e2e/pages, fixture file) match repo; fix fixture filename in skill if the typo is ever fixed in repo.
- Fixture: context/extensionId and MV3 vs background page still match e2e/fixutes.ts.
- Run:
pnpm test:e2eand build-before-test still correct.
code-quality-principles
- Thin Cursor skill points at .agents/dev/skills/code-quality-principles.md; if that path or agent roles change, update the skill and AGENTS.md.
After editing
- Keep SKILL.md under 500 lines; move long detail to reference.md if needed.
- Descriptions (frontmatter) stay third-person and include WHAT and WHEN.
- Links stay one level deep (no deep nesting from SKILL.md).
Related Skills
sm17p/wxt-svelte-extension
tools
VerifiedTrustedCommunity
Provides project context for the amgiflol WXT + Svelte 5 browser extension. Use when adding or editing extension code, adding entrypoints, fixing extension bugs, or when working in src/entrypoints or wxt.config.ts.
43SKILL.mdUpdated Apr 16, 2026
sm17p/releases-changesets
development
VerifiedTrustedCommunity
Uses changesets for versioning and changelog; avoids manual version bumps; aligns with build/zip and workflow_dispatch. Use when cutting a release, adding a changeset, preparing for publish, or when touching version or changelog.
43SKILL.mdUpdated Apr 16, 2026
sm17p/pr-from-issue
tools
VerifiedTrustedCommunity
Creates a GitHub PR for the current work using GitHub MCP; links to an existing issue with Closes
43SKILL.mdUpdated Apr 16, 2026
sm17p/jj-commit
testing
VerifiedTrustedCommunity
Stages and commits changes in jj (Jujutsu VCS) with a clear, concise commit message. Use when committing changes with jj, setting a revision description, or when the user asks to commit with jj.
43SKILL.mdUpdated Apr 16, 2026