Shared rules for any DevOps work — trust model, the propose-never-apply cardinal rule, GitOps means write to Git not the cluster, OIDC-over-static credentials, Sigstore/Rekor…
Verifies a mobile UI change by running it on a simulator/emulator. Use after editing any screen, view, or layout — boot a device, install the build, screenshot, and diff against…
Bounds blast radius when a session ingests untrusted input (web pages, GitHub issues, scraped content, MCP output) via the Agents Rule of Two plus filesystem/egress deny rules.
MLflow tracking conventions — MLflow 3.5.1+ as the minimum, every training run logged, GenAI tracing for LLM apps, the run-comparator agent flagging suspicious improvements, and…
Decomposes a goal and fans it out to isolated worker sub-agents with per-task review gates and spawn budgets.
LLM-app discipline — the three-tier assertion/judge/human eval ladder with no higher tier before the lower, cross-family judges, a single pinned model-version env var,…
The assertion → judge → human eval ladder per Husain & Shankar (Jan 15 2026). No higher tier without the lower tier populated.
Models content schemas, writes typed GROQ queries, and fetches from Sanity with @sanity/client. Use whenever integrating Sanity CMS content into a web project.
Google BigQuery remote MCP conventions (preview) — GCP Workload Identity Federation auth never a static service-account key, a read-only bigquery.jobUser + dataViewer role,…
Track work in GitHub Issues via the GitHub MCP or gh CLI. Use when picking up assigned work, reporting progress, and linking commits and PRs to issues.
GitHub Actions conventions — job_workflow_ref-pinned OIDC trust, 40-char SHA-pinning of every uses (enforced client-side by gha-sha-pin-actions), SLSA L3 via…
Pulumi conventions — ESC dynamic logins as the GA OIDC pattern for module CI, the archived-CDKTF migration path via pulumi convert, the for_each/provider-alias caveats of…
Snowflake Cortex Managed MCP conventions — OAuth only never a static password, Cortex Agent Evaluations as the agent-run eval surface, a SELECT-only read-only role, and mutation…
marimo reactive .py notebook conventions — notebooks are git-diffable Python files edited directly, the reactive dependency graph re-runs downstream cells, Restart-and-Run-All via…
Store and query provenance-aware, time-bounded facts in the Zep knowledge-graph MCP. Use when working with facts that have a source, change over time, or need multi-hop r — from…
Conventions for telemetry collection, dashboards, alert rules, SLOs/error budgets, and on-call automation where agents touch production via MCP not copy-pasted dashboards.
Polars idioms — lazy frames via scan_parquet with a single final collect, with_columns over column assignment, DuckDB via pl.SQLContext for heavy joins, Polars v1.40 as the…
Read Impeller renderer traces; identify shader stutters; decide when to fall back to Skia (Android only).
Writes Gherkin .feature files from a user story so non-technical stakeholders can sign off on behavior. Use before implementing any user-visible behavior change.
Terraform / OpenTofu conventions — native *.tftest.hcl over Terratest, the tftest-not-apply guard against real-cloud test billing, OpenTofu 1.11.4 init-breaking changes,…
Scaffold a new dbt model with contract, unit test, and model body in the right order. Seeded from dbt-labs/dbt-agent-skills (Feb 9 2026).
Conventions for independently deployable microservices over messaging or HTTP/gRPC. Use when .claude/HARNESS.toml selects web/distributed-backend, or when working on a…
Astro server-first conventions — zero client JS by default, island hydration directives, content collections, and static vs server rendering.
Drives deterministic code red-green-refactor. Use before writing or changing any implementation file — write a failing test first, watch it fail, write minimal code to pa — from…
dbt-core conventions — contract-first models with contract.enforced true, mandatory unit tests, a semantic layer as the single metric source of truth, the dbt remote MCP as the…
Run the notebook top-to-bottom in a clean kernel before claiming it is done. The only acceptance test for notebooks.
Sigstore Cosign conventions — keyless OIDC signing with no long-lived keys, mandatory Rekor transparency-log inclusion verification (the cosign-tlog-required hook refuses…
Conventions for a Swift / SwiftUI iOS app targeting App Store Connect. Use when .claude/HARNESS.toml selects mobile/native-ios, or when building iOS UI with Swift 6.2 Approachable…
Store and retrieve durable facts from the Mem0 vector-memory MCP. Use at session start to recall task-relevant memories, and whenever you learn a durable user- or domain- — from…
Astral uv toolchain conventions — lockfile-frozen by default with uv lock --frozen and uv sync --frozen, uv add for atomic pyproject + lock updates, frozen-only CI/production…
Write dbt unit-test specs with given/when/expect shape. Seeded from dbt-labs/dbt-agent-skills (Feb 9 2026).
Next.js App Router conventions — Server Components by default, leaf-node 'use client' boundaries, server-side data fetching with cache control, Server Actions for mutations,…
Maintain plan and task files in .claude/progress/ as work proceeds. Use at the start of any non-trivial task and continuously while working, to keep the plan and checklis — from…
Pin every seed (random, numpy, torch, jax, transformers, PYTHONHASHSEED) and freeze the lockfile (uv) before a training run. The training-implementer agent applies this.
Multi-environment state conventions — one backend and one STS session per env tier with no credential reuse, per-env cost budgets, drift surfaced never remediated via…
AWS conventions — 15-minute STS session ceiling, AFT-on-Control-Tower account bootstrap, EKS Pod Identity over IRSA, OIDC trust federated to STS with tight sub-claim scope, and…
Patrol E2E conventions for Flutter — extends integration_test with native automation (UIAutomator + XCUITest) to tap permission dialogs, toggle system settings, handle…
Author Fastlane lanes — signing, screenshots, store upload. Enforces two-key on release lanes.
Track work in Linear via the Linear MCP. Use when picking up assigned issues, advancing workflow states, reporting progress, and linking branches and PRs.
Runs work through a fixed sequential four-stage DAG (spec-writer to architect-reviewer to implementer to tester) with a gate between stages.
Installs and uses shadcn/ui components via the MCP or CLI, and applies Tailwind utility-class conventions.
Auth.js v5 authentication conventions — encrypted sessions, env-var-only secrets, server vs client session access, edge middleware route protection, and provider credential…
Verifies UI changes via the accessibility tree, not screenshots. Use after editing any component, page, or style — fetch the Playwright a11y snapshot, run axe-core for WCAG, check…
Writes Playwright E2E tests using the page-object pattern and accessibility-tree assertions. Use whenever creating or editing E2E test files in a Playwright project.
Coordinates heterogeneous agents through a shared file-system blackboard at docs/blackboard/ instead of message passing.
Author Maestro YAML flows — selectors, gestures, assertions, app launch/state setup.
Conventions for a Flutter 3.27+ / Dart 3.x app targeting iOS + Android with the Impeller renderer and Riverpod state.
Author EAS Workflows YAML for Expo/React Native — build, test, submit, and OTA-update pipelines. Use when setting up or editing EAS CI/CD automation for a React Native + Expo app.
XcodeBuildMCP + ios-simulator-mcp for headless iOS/macOS/tvOS/watchOS/visionOS build, scheme management, simulator boot/install/launch, screenshot, log streaming, test execution,…
Playwright E2E conventions — the required page-object model, asserting on the accessibility tree (toMatchAriaSnapshot) rather than pixels, and strict per-test isolation with…
Every LLM call goes through a single pinned model-ID env var. Pin bumps require typed-token confirmation.
Track work in Jira via the Atlassian MCP. Use when picking up assigned issues, transitioning workflow states, reporting progress, and linking commits and PRs in enterpris — from…
Turn `./gradlew --console=plain` output into a structured fix list (failing module, task, line, remediation).
Sentry error and performance monitoring conventions — MCP output treated as untrusted, public DSN vs secret auth token handling, PII data minimization with beforeSend, and…
Turns a vague request into a precise, testable spec contract. Use at the start of any non-trivial feature — before Plan Mode, before any edit — to externalize ambiguity into…
ML-pipeline discipline — every training run logged, lockfile-frozen environments, every seed pinned, the eval suite as a separate package the model never imports, a data hash per…
Fastlane lane conventions for iOS + Android store delivery — beta/release/internal/production lanes, screenshot lanes, match signing with an App Store Connect API key kept out of…
Conventions for operating a Kubernetes cluster or fleet with a GitOps engine, platform addons, and a paved-path manifest set for application teams.
Shared rules for any web engineering work — trust model, non-negotiable accessibility (verify the a11y tree not screenshots, axe-core WCAG 2.2 AA), live docs via Context7, and a…
Conventions for a Kotlin / Jetpack Compose Android app targeting Google Play. Use when .claude/HARNESS.toml selects mobile/native-android, or when building Android UI with Compose…