The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides numerous commands for the agent to execute for linting, testing, and security scanning. These include tsc, eslint, vitest, semgrep, gitleaks, and lighthouse. These are all standard development tools used for their intended purposes.
[EXTERNAL_DOWNLOADS]: Step 4 recommends installing several well-known security and quality tools. These include semgrep (via pipx), gitleaks (via brew), osv-scanner (via brew), and various NPM packages like lighthouse, size-limit, and @axe-core/cli. These are recognized industry-standard tools from reputable sources.
[DYNAMIC_EXECUTION]: The references/floor-guard.md file contains a reference Node.js script. This script is intended to be used as a local git hook to verify that quality constraints haven't been weakened in a diff. It uses execFileSync to run git commands and perform regex-based text analysis on the diff. The script's logic is transparent and focused entirely on its stated purpose of identifying 'floor' violations.
[DATA_EXFILTRATION]: The skill specifically includes a warning to use the --redact flag with gitleaks to prevent secrets from being captured in the agent's logs or transcripts, which is a proactive security measure.

constraint-driven-development