スキル constraint-driven-development
📦

constraint-driven-development

コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド📁 ファイルシステムへのアクセス

Define Enforceable Project Quality Constraints

Teams often lack measurable quality standards, allowing checks and thresholds to drift during development. This skill defines a shared contract and connects each constraint to practical enforcement.

対応: Claude Codex Code(CC)
📊 66 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト
Review the Skillstore skill "constraint-driven-development" from https://skillstore.io/skills/addyosmani-constraint-driven-development.md and its manifest at https://skillstore.io/api/skills/addyosmani-constraint-driven-development/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/addyosmani-constraint-driven-development.md 署名済み manifest GET /api/skills/addyosmani-constraint-driven-development/manifest 署名済み lockfile GET /api/skills/addyosmani-constraint-driven-development/lockfile

テストする

「constraint-driven-development」を使用しています。 Set up constraints for a TypeScript web application with tests, preview deployments, and no documented quality gates.

期待される結果:

  • Created a quality contract covering types, linting, secret scanning, changed-line coverage, accessibility, and performance.
  • Assigned fast checks to edit time, coverage to task completion, and browser checks to preview deployment.
  • Recorded current coverage as a ratchet and required owners and expiry dates for exceptions.

「constraint-driven-development」を使用しています。 Our legacy Python service has low coverage, so fixed coverage targets fail immediately.

期待される結果:

  • Measured current project coverage and set it as a non-regression baseline.
  • Applied a stronger coverage target only to changed lines.
  • Placed type, lint, and secret checks in the fast stage while keeping broader security scans in CI.

「constraint-driven-development」を使用しています。 Review a branch where tests pass after several quality configuration changes.

期待される結果:

  • Flagged a lowered threshold, a newly skipped test, and an added suppression for review.
  • Kept tightened constraints silent and requested tracked exceptions for approved deviations.
  • Recommended fixing the implementation instead of weakening the quality contract.

セキュリティ監査

中リスク
v1 • 2026/9/19 バージョン別レポートを開く

All 87 static alerts are false positives caused by Markdown formatting, filename regular expressions, or a constrained git helper that avoids shell interpolation. The review found no prompt injection or malicious command intent. One medium-risk semantic issue remains because the floor guard can print matched source text without redaction.

2
スキャンされたファイル
412
解析済み行数
0
レビュー項目
0
誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中
references/floor-guard.md:54references/floor-guard.md:90
Matched Diff Content May Be Exposed in Logs
The floor guard stores up to 120 characters from each matched diff line and prints that text to standard error. A matching line containing a credential or other sensitive value could therefore enter local or CI logs despite the stated redaction contract.
The reference directly retains matched source text and interpolates it into console output. No redaction step is applied before logging.

リスク要因

⚙️ 外部コマンド (50)
references/floor-guard.md:21 references/floor-guard.md:29 references/floor-guard.md:90-93 SKILL.md:10 SKILL.md:27 SKILL.md:31 SKILL.md:33 SKILL.md:38 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:59 SKILL.md:61-71 SKILL.md:71-73 SKILL.md:73-77 SKILL.md:77-79 SKILL.md:79-83 SKILL.md:83-85 SKILL.md:85-89 SKILL.md:89-97 SKILL.md:97-104 SKILL.md:104 SKILL.md:105 SKILL.md:114-115 SKILL.md:115-116 SKILL.md:116-117 SKILL.md:117-118 SKILL.md:118-119 SKILL.md:119-120 SKILL.md:120-121 SKILL.md:121-137 SKILL.md:137 SKILL.md:138-140 SKILL.md:140 SKILL.md:148-149 SKILL.md:149 SKILL.md:150 SKILL.md:151 SKILL.md:152 SKILL.md:153 SKILL.md:154 SKILL.md:155 SKILL.md:156 SKILL.md:157 SKILL.md:158 SKILL.md:159 SKILL.md:160
📁 ファイルシステムへのアクセス (5)
references/floor-guard.md:67 references/floor-guard.md:72 references/floor-guard.md:79 references/floor-guard.md:80 references/floor-guard.md:41
監査者: codex
このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く
セキュリティ評価

レポートリンクをコピー

https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/addyosmani-constraint-driven-development/security.svg)](https://skillstore.io/skills/addyosmani-constraint-driven-development?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/addyosmani-constraint-driven-development?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-constraint-driven-development/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/addyosmani-constraint-driven-development.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学術引用 (APA · BibTeX · CFF)

APA形式の引用

addyosmani. (2026). constraint-driven-development security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1

BibTeX形式の引用

@techreport{addyosmani-addyosmani-constraint-driven-development-2026, author = {addyosmani}, title = {constraint-driven-development security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "constraint-driven-development security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "addyosmani" date-released: "2026-09-19" url: "https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1" identifiers: - type: other value: "skillstore:addyosmani-constraint-driven-development:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由 証拠の信頼度: 中
41
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠

作成できるもの

Set Standards for a New Project

Define measurable quality gates before implementation expands, with defaults tied to available tools and current project evidence.

Protect an Autonomous Workflow

Add fast checks and diff guards that detect weakened thresholds, silenced tools, skipped tests, and unfinished work.

Stabilize Existing CI Gates

Convert inconsistent checks into documented constraints with owners, commands, lifecycle stages, baselines, and explicit exception expiry dates.

これらのプロンプトを試す

Create a Basic Quality Contract 
Review this project and help me define a basic quality contract. Ask one question at a time and use measured defaults when I am unsure.
Define Measurable Gates 
Create project constraints for coverage, security, and linting. Measure the current baseline, explain each threshold, and identify the command that verifies it.
Stage Checks by Cost 
Add quality gates for edit, task, review, and CI phases. Keep fast checks under five seconds and scope expensive checks to changed files.
Audit Constraint Integrity 
Audit our constraints for weakened thresholds, new suppressions, skipped tests, removed assertions, unfinished stubs, and untracked exceptions. Propose remediations without lowering standards.

ベストプラクティス

  • Measure the current baseline before choosing thresholds that could leave the project permanently failing.
  • Place each check according to execution cost, and keep the edit loop focused on changed files.
  • Record every exception with a reason, owner, and expiry date.

回避

  • Do not lower a threshold or disable a checker merely to make a change pass.
  • Do not define a numeric constraint without naming the command that verifies it.
  • Do not rely only on tests written by the same system that produced the implementation.

よくある質問

What does this skill create?
It creates a project quality contract, usually in CONSTRAINTS.md, with measurable rules, verification commands, lifecycle stages, and exception handling.
Does it require a new project?
No. It can measure an existing codebase and establish ratchets that prevent current quality metrics from declining.
What happens when I do not know a target number?
The skill measures the current value, records it as a baseline, and prevents regression until the team chooses a stronger target.
Will every check run after each edit?
No. Fast checks run near edits, while expensive coverage, browser, mutation, and security checks move to later stages.
Can the floor guard replace code review?
No. It detects common diff patterns with regular expressions, but human review remains necessary for context, intent, and sophisticated changes.
How are temporary exceptions handled?
Each exception should include a rule, path, reason, owner, and expiry date so deviations remain visible and accountable.

開発者情報

作成者

addyosmani

ライセンス

MIT

Skillstore リビジョン

r1

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/addyosmani/agent-skills/tree/c004a74784a08295d52749b04cda634125b9a581/skills/constraint-driven-development

参照

5d5054f8a23586f9b500fece1cb613a9dffc787b

メンテナンスの新しさ

2026/9/19

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📁 references/

📄 floor-guard.md

📄 SKILL.md

addyosmani のその他のスキル

すべて表示

関連スキル

すべて表示