Architecture-first workflow for delegating complex projects to AI coding agents. Ensures code fits the system before it's written.
Security Analysis
high confidenceThe skill is an instruction-only, architecture-first coding workflow that requests no installs or credentials and its runtime instructions match its stated purpose.
Name and description (architecture-first delegation) align with the SKILL.md content. The skill is instruction-only and does not request unrelated binaries, environment variables, or config paths — nothing requested is disproportionate to an architecture-guided code-generation helper.
Instructions stay on-topic (read architecture, declare filepath, list deps/consumers, produce typed production-ready code and tests). One ambiguity: it repeatedly instructs the agent to 'Read the architecture document' but does not specify where that document lives or how to obtain it — this assumes the agent has access to the repo/context provided by the user. The checklist mentions 'Environment variables used for secrets' (encouraging use of env vars) but the skill does not request or require any secrets itself.
No install specification and no code files. Instruction-only skills write nothing to disk during install and do not download external artifacts — low installation risk.
The registry metadata declares no required environment variables, credentials, or config paths. The SKILL.md's checklist references using environment variables for secrets as a best practice but does not request any secrets — overall environment access is proportionate.
Skill is not always:true and does not request persistent privileges or modify other skills' configuration. It can be invoked by the model (default) which is expected for functional skills; no elevated persistent presence is requested.
Guidance
This skill appears coherent and low-risk: it only provides instructions for architecture-first code generation and asks for no installs or credentials. Before installing, confirm how the agent will access your architecture document and codebase (it assumes repository/context access). If you are concerned about data access, limit the agent's repository or file access or provide only the relevant architecture sections. Also be aware the skill encourages using environment variables for secrets in generated code — ensure you supply secrets securely when integrating generated code into your environment.
Latest Release
v0.1.0
Initial release of the delegation skill for architecture-first coding workflows. - Enforces that all code changes fit strict architectural guidelines before implementation. - Introduces a structured workflow: analyze architecture, declare filepath, list dependencies/consumers, check for conflicts. - Standardizes response format for code generation and documentation. - Adds a rigorous compliance checklist for production readiness. - Outlines key architectural principles and references related skills for UI and PR processes.
More by @michaelmonetized
Published by @michaelmonetized on ClawHub
