whatwecando/forge-validate
.claude/skills/forge-validate/SKILL.md
Validate a BLUEPRINT.md without generating anything. Returns a structured report showing what's complete, what's missing, and what questions to answer.
testing
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add whatwecando/tombola forge-validateInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 5:36 PM4.1s1 file scanned
SKILL.md
- name:
- forge-validate
- description:
- Validate a BLUEPRINT.md without generating anything. Returns a structured report showing what's complete, what's missing, and what questions to answer.
/forge-validate
Validate a BLUEPRINT.md and display a detailed report.
Prerequisites
- A
BLUEPRINT.mdfile must exist at the project root (or pass a path as argument:$ARGUMENTS)
What happens
- Deterministic validation via
validate-blueprint.js(schema + structural checks) - If structural errors: display them and STOP
- forge-validator runs 23 semantic checks (18 mandatory, 5 recommended)
- A structured report is displayed:
- COMPLET or INCOMPLET status
- Checklist of all sections with pass/fail
- Feature count by priority
- Dependency graph with cycle detection
- Questions for missing information
Result
- No files are created or modified
- The report tells you exactly what to fix before running
/forge-generate
Invoke the forge agent in validate-only mode.
Related Skills
whatwecando/conventions
tools
VerifiedTrustedCommunity
Display and enforce project conventions for Dagsmith Tombola
SKILL.mdUpdated Apr 16, 2026
whatwecando/forge-verify
testing
VerifiedTrustedCommunity
Verify phase completion by running all checks and tests
SKILL.mdUpdated Apr 16, 2026
whatwecando/forge-validate
testing
VerifiedTrustedCommunity
Validate a BLUEPRINT.md file for completeness and correctness
SKILL.mdUpdated Apr 16, 2026
whatwecando/forge-ship
business
VerifiedTrustedCommunity
Archive a completed milestone. Generates a milestone report, archives planning files, creates a git tag, and cleans up.
SKILL.mdUpdated Apr 16, 2026