المهارات constraint-driven-development
📦

constraint-driven-development

مراجعة المحتوى r1 مخاطر متوسطة ⚙️ الأوامر الخارجية📁 الوصول إلى نظام الملفات

Define Enforceable Project Quality Constraints

Teams often lack measurable quality standards, allowing checks and thresholds to drift during development. This skill defines a shared contract and connects each constraint to practical enforcement.

يدعم: Claude Codex Code(CC)
📊 66 كافٍ

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل
Review the Skillstore skill "constraint-driven-development" from https://skillstore.io/skills/addyosmani-constraint-driven-development.md and its manifest at https://skillstore.io/api/skills/addyosmani-constraint-driven-development/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/addyosmani-constraint-driven-development.md manifest موقَّع GET /api/skills/addyosmani-constraint-driven-development/manifest lockfile موقَّع GET /api/skills/addyosmani-constraint-driven-development/lockfile

اختبرها

جارٍ استخدام "constraint-driven-development". Set up constraints for a TypeScript web application with tests, preview deployments, and no documented quality gates.

النتيجة المتوقعة:

  • Created a quality contract covering types, linting, secret scanning, changed-line coverage, accessibility, and performance.
  • Assigned fast checks to edit time, coverage to task completion, and browser checks to preview deployment.
  • Recorded current coverage as a ratchet and required owners and expiry dates for exceptions.

جارٍ استخدام "constraint-driven-development". Our legacy Python service has low coverage, so fixed coverage targets fail immediately.

النتيجة المتوقعة:

  • Measured current project coverage and set it as a non-regression baseline.
  • Applied a stronger coverage target only to changed lines.
  • Placed type, lint, and secret checks in the fast stage while keeping broader security scans in CI.

جارٍ استخدام "constraint-driven-development". Review a branch where tests pass after several quality configuration changes.

النتيجة المتوقعة:

  • Flagged a lowered threshold, a newly skipped test, and an added suppression for review.
  • Kept tightened constraints silent and requested tracked exceptions for approved deviations.
  • Recommended fixing the implementation instead of weakening the quality contract.

التدقيق الأمني

مخاطر متوسطة
v1 • ١٩‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

All 87 static alerts are false positives caused by Markdown formatting, filename regular expressions, or a constrained git helper that avoids shell interpolation. The review found no prompt injection or malicious command intent. One medium-risk semantic issue remains because the floor guard can print matched source text without redaction.

2
الملفات التي تم فحصها
412
الأسطر التي تم تحليلها
0
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

متوسط
references/floor-guard.md:54references/floor-guard.md:90
Matched Diff Content May Be Exposed in Logs
The floor guard stores up to 120 characters from each matched diff line and prints that text to standard error. A matching line containing a credential or other sensitive value could therefore enter local or CI logs despite the stated redaction contract.
The reference directly retains matched source text and interpolates it into console output. No redaction step is applied before logging.

عوامل الخطر

⚙️ الأوامر الخارجية (50)
references/floor-guard.md:21 references/floor-guard.md:29 references/floor-guard.md:90-93 SKILL.md:10 SKILL.md:27 SKILL.md:31 SKILL.md:33 SKILL.md:38 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:59 SKILL.md:61-71 SKILL.md:71-73 SKILL.md:73-77 SKILL.md:77-79 SKILL.md:79-83 SKILL.md:83-85 SKILL.md:85-89 SKILL.md:89-97 SKILL.md:97-104 SKILL.md:104 SKILL.md:105 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-118 SKILL.md:118-119 SKILL.md:119-120 SKILL.md:120-121 SKILL.md:121-137 SKILL.md:137 SKILL.md:138-140 SKILL.md:140 SKILL.md:148-149 SKILL.md:149 SKILL.md:150 SKILL.md:151 SKILL.md:152 SKILL.md:153 SKILL.md:154 SKILL.md:155 SKILL.md:156 SKILL.md:157 SKILL.md:158 SKILL.md:159 SKILL.md:160
📁 الوصول إلى نظام الملفات (5)
references/floor-guard.md:67 references/floor-guard.md:72 references/floor-guard.md:79 references/floor-guard.md:80 references/floor-guard.md:41
دقّقه: codex
شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار
تقييم الأمان

نسخ رابط التقرير

https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/addyosmani-constraint-driven-development/security.svg)](https://skillstore.io/skills/addyosmani-constraint-driven-development?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/addyosmani-constraint-driven-development?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-constraint-driven-development/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/addyosmani-constraint-driven-development.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

addyosmani. (2026). constraint-driven-development security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1

اقتباس BibTeX

@techreport{addyosmani-addyosmani-constraint-driven-development-2026, author = {addyosmani}, title = {constraint-driven-development security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "constraint-driven-development security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "addyosmani" date-released: "2026-09-19" url: "https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1" identifiers: - type: other value: "skillstore:addyosmani-constraint-driven-development:audit:1" description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط
41
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
65
المجتمع
83
الامتثال للمواصفات

ما الذي يمكنك بناؤه

Set Standards for a New Project

Define measurable quality gates before implementation expands, with defaults tied to available tools and current project evidence.

Protect an Autonomous Workflow

Add fast checks and diff guards that detect weakened thresholds, silenced tools, skipped tests, and unfinished work.

Stabilize Existing CI Gates

Convert inconsistent checks into documented constraints with owners, commands, lifecycle stages, baselines, and explicit exception expiry dates.

جرّب هذه الموجّهات

Create a Basic Quality Contract 
Review this project and help me define a basic quality contract. Ask one question at a time and use measured defaults when I am unsure.
Define Measurable Gates 
Create project constraints for coverage, security, and linting. Measure the current baseline, explain each threshold, and identify the command that verifies it.
Stage Checks by Cost 
Add quality gates for edit, task, review, and CI phases. Keep fast checks under five seconds and scope expensive checks to changed files.
Audit Constraint Integrity 
Audit our constraints for weakened thresholds, new suppressions, skipped tests, removed assertions, unfinished stubs, and untracked exceptions. Propose remediations without lowering standards.

أفضل الممارسات

  • Measure the current baseline before choosing thresholds that could leave the project permanently failing.
  • Place each check according to execution cost, and keep the edit loop focused on changed files.
  • Record every exception with a reason, owner, and expiry date.

تجنب

  • Do not lower a threshold or disable a checker merely to make a change pass.
  • Do not define a numeric constraint without naming the command that verifies it.
  • Do not rely only on tests written by the same system that produced the implementation.

الأسئلة المتكررة

What does this skill create?
It creates a project quality contract, usually in CONSTRAINTS.md, with measurable rules, verification commands, lifecycle stages, and exception handling.
Does it require a new project?
No. It can measure an existing codebase and establish ratchets that prevent current quality metrics from declining.
What happens when I do not know a target number?
The skill measures the current value, records it as a baseline, and prevents regression until the team chooses a stronger target.
Will every check run after each edit?
No. Fast checks run near edits, while expensive coverage, browser, mutation, and security checks move to later stages.
Can the floor guard replace code review?
No. It detects common diff patterns with regular expressions, but human review remains necessary for context, intent, and sophisticated changes.
How are temporary exceptions handled?
Each exception should include a rule, path, reason, owner, and expiry date so deviations remain visible and accountable.

تفاصيل المطور

المؤلف

addyosmani

الترخيص

MIT

مراجعة Skillstore

r1

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/addyosmani/agent-skills/tree/c004a74784a08295d52749b04cda634125b9a581/skills/constraint-driven-development

مرجع

5d5054f8a23586f9b500fece1cb613a9dffc787b

حداثة الصيانة

١٩‏/٩‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📁 references/

📄 floor-guard.md

📄 SKILL.md

المزيد من addyosmani

عرض الكل

مهارات ذات صلة

عرض الكل