Install
$ agentstack add skill-borjasolerme-agent-skills-coding-workflow ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Coding Workflow
Apply these guardrails whenever you are coding, debugging, or reviewing.
For concrete phrasing and example workflows, read references/examples.md only when examples would help with the current task.
Companion skills and tools
If installed and relevant, prefer these helpers:
tddfromhttps://github.com/mattpocock/skillsbefore planning tests or adding testsvercel-react-best-practicesfor React and Next.js changes, especially during reviewfrontend-designduring implementation, but only within the app's existing design languageemil-design-engonly when the user explicitly asks for extra UI polishagent-browserfor visual validation, layout checks, canvas, drag-and-drop, and "does this look right?" checks
Do not force these skills if the task is too small or the tool is not available.
Suggested install set:
npx skills add https://github.com/vercel-labs/agent-browser --skill agent-browsernpx skills add https://github.com/vercel-labs/agent-skills --skill vercel-react-best-practicesnpx skills add https://github.com/anthropics/skills --skill frontend-designnpx skills add emilkowalski/skillnpx skills add https://github.com/mattpocock/skills --skill tdd
1. Before implementing
Start by clarifying the task instead of guessing.
- State assumptions explicitly
- If the request is ambiguous, present the main interpretations instead of silently choosing one
- Push back when a simpler path would achieve the same goal
- If something is still unclear, stop and ask
Before coding, step back and ask:
How can we make this simpler and dumber while still achieving the goal?
2. Implementation defaults
Prefer the smallest coherent change.
- Reuse the app's existing components before creating new ones
- Reuse existing colors, spacing, shadows, typography, and interaction patterns
- Do not redesign the product unless the user explicitly asks for redesign work
- Do not add gradients or decorative styling that does not already exist in the app
- Do not create custom buttons, cards, inputs, modals, or other UI primitives if existing ones already cover the need
- Do not introduce custom abstractions or components without clear payoff
- Keep the implementation readable for the next agent
For React changes, avoid adding effects by reflex. First prefer derived state, event handlers, keyed resets, and data flow that does not need useEffect. Reference: https://react.dev/learn/you-might-not-need-an-effect
3. Choose the right level of process
Super small changes
If the change is truly small, do it directly with good code practices and avoid process overhead.
Normal changes
Use TDD with vertical slices, keeping the implementation as simple as possible.
- Confirm the behavior to prove before writing code
- Write one failing test for one behavior
- Implement the minimum code to make that test pass
- Repeat one behavior at a time
- Add tests that prevent this class of bug from returning
- Do not add broad, low-signal tests just to say "tested"
Pick the lightest tool that covers the risk:
Vitestfor business logic, hooks, utilities, and component behavior that does not need a browserpgTAPfor Supabase database logic, SQL, RLS, and policy behavioragent-browseras the default browser automation tool for agent-run validation, including auth, CRUD, routing, navigation, visual checks, canvas, drag-and-drop, and layout validationPlaywrightonly when the project already uses it for committed in-repo browser tests or when the task specifically requires Playwright
If UI was changed in a meaningful visual way, explicitly confirm whether agent-browser validation was done.
4. Debugging
Debug by seeking truth, not by retrying blindly.
- Read the code carefully before rerunning commands
- Form a concrete hypothesis for the failure
- Liberally add temporary logging statements anywhere in the codebase to verify logic works as you expect, but do not commit them
- Trace the root cause before fixing symptoms
- Remove temporary debugging code before finishing
5. Review before finishing
Review the change with these questions:
- Is this reusable and understandable, or is it a quick fix?
- Does it follow the app's existing patterns?
- For React and Next.js work, does it follow
vercel-react-best-practices? - Did we avoid over-engineering?
- If another agent opens this later, will the intent be obvious?
6. Commit and push every completed change
After completing and verifying each meaningful change set:
- Always commit the change before finishing the task
- Always push the current branch after committing
- Keep commits scoped and readable
- Do not include, rewrite, or revert unrelated work from other sessions
This is required for every coding task. Do not wait for the user to request a commit or push, and do not limit this behavior to concurrent sessions.
If the repository is unclear, broken, or the change is still unfinished, resolve that state before committing and pushing. If it cannot be resolved safely, report the blocker explicitly instead of silently skipping the commit or push.
User request
$ARGUMENTS
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: borjasolerme
- Source: borjasolerme/agent-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.