스킬 constraint-driven-development

📦

constraint-driven-development

Name: constraint-driven-development
Author: addyosmani

콘텐츠 리비전 r1 중간 위험 ⚙️ 외부 명령어📁 파일 시스템 접근

Define Enforceable Project Quality Constraints

Teams often lack measurable quality standards, allowing checks and thresholds to drift during development. This skill defines a shared contract and connects each constraint to practical enforcement.

지원: Claude Codex Code(CC)

📊 66 적절함

Maintain this Skill? Claim it 📊 66 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "constraint-driven-development" from https://skillstore.io/skills/addyosmani-constraint-driven-development.md and its manifest at https://skillstore.io/api/skills/addyosmani-constraint-driven-development/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/addyosmani-constraint-driven-development.md 서명된 manifest GET /api/skills/addyosmani-constraint-driven-development/manifest 서명된 lockfile GET /api/skills/addyosmani-constraint-driven-development/lockfile

테스트해 보기

"constraint-driven-development" 사용 중입니다. Set up constraints for a TypeScript web application with tests, preview deployments, and no documented quality gates.

예상 결과:

Created a quality contract covering types, linting, secret scanning, changed-line coverage, accessibility, and performance.
Assigned fast checks to edit time, coverage to task completion, and browser checks to preview deployment.
Recorded current coverage as a ratchet and required owners and expiry dates for exceptions.

"constraint-driven-development" 사용 중입니다. Our legacy Python service has low coverage, so fixed coverage targets fail immediately.

예상 결과:

Measured current project coverage and set it as a non-regression baseline.
Applied a stronger coverage target only to changed lines.
Placed type, lint, and secret checks in the fast stage while keeping broader security scans in CI.

"constraint-driven-development" 사용 중입니다. Review a branch where tests pass after several quality configuration changes.

예상 결과:

Flagged a lowered threshold, a newly skipped test, and an added suppression for review.
Kept tightened constraints silent and requested tracked exceptions for approved deviations.
Recommended fixing the implementation instead of weakening the quality contract.

보안 감사

중간 위험

v1 • 2026. 9. 19. 버전별 보고서 열기

All 87 static alerts are false positives caused by Markdown formatting, filename regular expressions, or a constrained git helper that avoids shell interpolation. The review found no prompt injection or malicious command intent. One medium-risk semantic issue remains because the floor guard can print matched source text without redaction.

스캔된 파일

412

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

중간

references/floor-guard.md:54 references/floor-guard.md:90

Matched Diff Content May Be Exposed in Logs

The floor guard stores up to 120 characters from each matched diff line and prints that text to standard error. A matching line containing a credential or other sensitive value could therefore enter local or CI logs despite the stated redaction contract.

The reference directly retains matched source text and interpolates it into console output. No redaction step is applied before logging.

위험 요인

⚙️ 외부 명령어 (50)

📁 파일 시스템 접근 (5)

references/floor-guard.md:67 references/floor-guard.md:72 references/floor-guard.md:79 references/floor-guard.md:80 references/floor-guard.md:41

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/addyosmani-constraint-driven-development/security.svg)](https://skillstore.io/skills/addyosmani-constraint-driven-development?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/addyosmani-constraint-driven-development?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-constraint-driven-development/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/addyosmani-constraint-driven-development.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

addyosmani. (2026). constraint-driven-development security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1

BibTeX 인용

@techreport{addyosmani-addyosmani-constraint-driven-development-2026,
  author = {addyosmani},
  title = {constraint-driven-development security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "constraint-driven-development security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-constraint-driven-development/audits/1"
identifiers:
  - type: other
    value: "skillstore:addyosmani-constraint-driven-development:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Set Standards for a New Project

Define measurable quality gates before implementation expands, with defaults tied to available tools and current project evidence.

Protect an Autonomous Workflow

Add fast checks and diff guards that detect weakened thresholds, silenced tools, skipped tests, and unfinished work.

Stabilize Existing CI Gates

Convert inconsistent checks into documented constraints with owners, commands, lifecycle stages, baselines, and explicit exception expiry dates.

이 프롬프트를 사용해 보세요

Create a Basic Quality Contract

Review this project and help me define a basic quality contract. Ask one question at a time and use measured defaults when I am unsure.

Define Measurable Gates

Create project constraints for coverage, security, and linting. Measure the current baseline, explain each threshold, and identify the command that verifies it.

Stage Checks by Cost

Add quality gates for edit, task, review, and CI phases. Keep fast checks under five seconds and scope expensive checks to changed files.

Audit Constraint Integrity

Audit our constraints for weakened thresholds, new suppressions, skipped tests, removed assertions, unfinished stubs, and untracked exceptions. Propose remediations without lowering standards.

모범 사례

Measure the current baseline before choosing thresholds that could leave the project permanently failing.
Place each check according to execution cost, and keep the edit loop focused on changed files.
Record every exception with a reason, owner, and expiry date.

피하기

Do not lower a threshold or disable a checker merely to make a change pass.
Do not define a numeric constraint without naming the command that verifies it.
Do not rely only on tests written by the same system that produced the implementation.

자주 묻는 질문

What does this skill create?

It creates a project quality contract, usually in CONSTRAINTS.md, with measurable rules, verification commands, lifecycle stages, and exception handling.

Does it require a new project?

No. It can measure an existing codebase and establish ratchets that prevent current quality metrics from declining.

What happens when I do not know a target number?

The skill measures the current value, records it as a baseline, and prevents regression until the team chooses a stronger target.

Will every check run after each edit?

No. Fast checks run near edits, while expensive coverage, browser, mutation, and security checks move to later stages.

Can the floor guard replace code review?

No. It detects common diff patterns with regular expressions, but human review remains necessary for context, intent, and sophisticated changes.

How are temporary exceptions handled?

Each exception should include a rule, path, reason, owner, and expiry date so deviations remain visible and accountable.

개발자 세부 정보

작성자

addyosmani

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/addyosmani/agent-skills/tree/c004a74784a08295d52749b04cda634125b9a581/skills/constraint-driven-development

참조

5d5054f8a23586f9b500fece1cb613a9dffc787b

유지보수 최신성

2026. 9. 19.

사용량

0 다운로드 · 0 조회

파일 구조

📁 references/

📄 floor-guard.md

📄 SKILL.md