技能 incremental-implementation

📦

incremental-implementation

Name: incremental-implementation
Author: addyosmani

内容修订 r2 安全 ⚡ 包含脚本⚙️ 外部命令📁 文件系统访问🔑 环境变量

Build Software in Small, Verifiable Increments

Large changes are difficult to test, review, and recover when problems appear late. This skill breaks work into complete increments with explicit tests, verification, and rollback points.

支持: Claude Codex Code(CC)

🥉 78 青铜

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "incremental-implementation" from https://skillstore.io/skills/addyosmani-incremental-implementation.md and its manifest at https://skillstore.io/api/skills/addyosmani-incremental-implementation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/addyosmani-incremental-implementation.md 已签名 manifest GET /api/skills/addyosmani-incremental-implementation/manifest 已签名 lockfile GET /api/skills/addyosmani-incremental-implementation/lockfile

测试它

正在使用“incremental-implementation”。 Add task creation, task listing, and task editing to an application.

预期结果:

Increment 1: create a task through the database, API, and basic interface.
Increment 2: list tasks through the query, API, and interface.
Increment 3: edit a task with focused tests and verification.

正在使用“incremental-implementation”。 Add a sharing feature that is not ready for all users.

预期结果:

Add the sharing path behind a disabled-by-default feature flag. Test the flag-off behavior, then verify the enabled path before wider release.

正在使用“incremental-implementation”。 A new WebSocket integration has uncertain reliability.

预期结果:

Start with a connection proof and its test. Add real-time updates only after the connection works, then add reconnection and offline behavior.

安全审计

安全

v2 • 2026/9/19 打开版本化报告

All 28 static findings are false positives caused by Markdown syntax, illustrative code, or ordinary implementation guidance. The skill contains no executable scripts, network behavior, secret handling, or prompt injection evidence.

已扫描文件

250

分析行数

复核项

已忽略误报

风险因素

⚡ 包含脚本 (1)

SKILL.md:130

⚙️ 外部命令 (21)

📁 文件系统访问 (1)

SKILL.md:249

🔑 环境变量 (2)

SKILL.md:153 SKILL.md:153

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/addyosmani-incremental-implementation/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/addyosmani-incremental-implementation/security.svg)](https://skillstore.io/skills/addyosmani-incremental-implementation?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/addyosmani-incremental-implementation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-incremental-implementation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/addyosmani-incremental-implementation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

addyosmani. (2026). incremental-implementation security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-incremental-implementation/audits/2

BibTeX 引用

@techreport{addyosmani-addyosmani-incremental-implementation-2026,
  author = {addyosmani},
  title = {incremental-implementation security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/addyosmani-incremental-implementation/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "incremental-implementation security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-incremental-implementation/audits/2"
identifiers:
  - type: other
    value: "skillstore:addyosmani-incremental-implementation:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Plan a Multi-File Feature

Turn a large feature into complete vertical slices that can be tested and reviewed as they are built.

Coordinate Frontend and Backend Work

Use contract-first slicing to define shared interfaces before parallel implementation and integration.

Reduce Delivery Risk

Use risk-first slices, feature flags, and rollback-friendly changes when a task has uncertainty or incomplete functionality.

试试这些提示

Start a Small Change

Help me split this change into the smallest complete increment. Identify the files, test, and verification step for the first increment.

Plan Vertical Slices

Create a vertical-slice plan for this feature. Each slice must deliver working behavior, include tests, and remain reviewable.

Use a Contract First

Design a contract-first sequence for this frontend and backend change. Separate the contract, backend, frontend, and integration checks.

Prioritize Technical Risk

Analyze this implementation plan and reorder its increments by technical risk. Add feature flags, verification gates, and rollback points where needed.

最佳实践

Keep every increment complete, testable, and independently reviewable.
Address the riskiest or most uncertain technical assumption early.
Use explicit scope, verification gates, feature flags, and rollback points.

避免

Implementing an entire multi-file feature before testing.
Combining unrelated refactors, configuration changes, and features.
Adding abstractions or scope before a real use case requires them.

常见问题

When should I use this skill?

Use it for multi-file features, refactors, feature flags, or tasks that feel too large to complete safely in one pass.

What is a vertical slice?

A vertical slice is a small change that travels through the required layers and leaves working user-visible behavior.

Should every increment be committed?

The skill recommends descriptive commits after verified increments so each change remains understandable and reversible.

How does contract-first slicing help?

It gives parallel teams a shared interface before they implement separate backend and frontend pieces.

When should I use a feature flag?

Use a flag when incomplete functionality must be merged without exposing it to users.

Does this skill run project commands?

No. It recommends that the agent discover and run the repository's own tests, build, type-check, and lint commands.

开发者详情

作者

addyosmani

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/addyosmani/agent-skills/tree/c004a74784a08295d52749b04cda634125b9a581/skills/incremental-implementation

引用

5d5054f8a23586f9b500fece1cb613a9dffc787b

维护新鲜度

2026/9/19

使用量

1 次下载 · 0 次浏览

文件结构

📄 SKILL.md