Install
$ agentstack add skill-grimoire-rs-grimoire-meta-maintain-config ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README — it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming — see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps — measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
AI Configuration Maintenance
Keep .claude/ directory living knowledge base. Stay current with project + AI tooling best practices.
Read .claude/rules/meta-ai-config.md first — defines conventions, budget constraints, anti-patterns this skill enforces.
Modes
create — New Artifact
- Discover + Research — Invoke canonical multi-agent research primitive from
/swarm-plan(Phases 1-2). Spawn workers parallel:
worker-explorer(1-2): existing.claude/patterns, conventions, cross-references, neighbors of artifactworker-researcher(1-3, split by axis): Claude Code docs (code.claude.com/docs), domain best practices, community patterns for artifact topic
Persist substantial findings as .claude/artifacts/research_[topic].md for reuse. See /swarm-plan "Research as a Reusable Primitive".
- Draft — Follow
meta-ai-config.mdconventions:
- Respect context budget (<200 lines rules, <500 lines skills)
- Use
paths:scoping for rules unless truly global - Skills: write description as "what + when to use" (max 1024 chars)
- Use progressive disclosure — SKILL.md overview, reference files for detail
- Add
disable-model-invocation: truefor action skills with side effects
- Integrate — Update CLAUDE.md tables, meta-rule inventory
- Validate — Run audit checks (see below)
audit — Check All Artifacts
Context budget audit:
- CLAUDE.md under 200 lines?
- Each global rule under 200 lines?
- Count global rules — too many degrades performance
- Skill descriptions total within 2% context budget?
Structural audit:
- Every SKILL.md has
name+description? - No
allowed-toolsin skill frontmatter? - All persona skills have
user-invocable: true? - Hook scripts executable?
Dead glob audit:
- For each scoped rule, do
paths:patterns match existing files? - After directory renames, glob patterns silently fail — verify with:
find . -path "pattern" | head -1
Cross-reference audit:
- Rules referencing other rules → targets exist?
- Skills referencing rules → correct filenames?
- Agents referencing rules → still valid?
Duplication audit:
- Same instruction in CLAUDE.md AND rule? (single source of truth)
- Same domain knowledge in skill AND rule? (skill for on-demand, rule for always-on)
refresh — Sync AI Knowledge with Codebase
- Detect drift — Spawn
worker-exploreragents:
- Public types in
subsystem-*.mdstill exist in code? - New modules/crates lacking subsystem rules?
- Error variants, trait names, method signatures still match?
- CLI commands changed (new flags, subcommands)?
deny.toml/.licenserc.tomlchanged?
- Research updates — Spawn
worker-researcher:
- Claude Code docs for new features (hooks, frontmatter, agents)
- New best practices in Rust, async, testing, security
- Check if
meta-ai-config.mdneeds updating
- Update stale artifacts — Read current code, update with accurate info, preserve structure
- Self-update — Check if this skill (
meta-maintain-config) ormeta-ai-config.mdoutdated per research findings. Update them too.
- Validate — Run
auditmode
review — AI Config Quality Review
Review recent changes to .claude/ for quality:
- Context budget — Change increase always-loaded context? Justified?
- Scoping — Could this global rule be path-scoped instead?
- Progressive disclosure — SKILL.md body under 500 lines? Move details to reference files?
- Description quality — Skill description specific enough for auto-discovery?
- Anti-patterns — Check against 8 anti-patterns in
meta-ai-config.md - Consistency — Change follow existing artifact conventions?
- Reusability — Hook more appropriate than rule? (deterministic + zero context cost)
catalog-sync — Catalog Drift Review
When auditing AI config, verify .claude/rules.md reflects reality:
- Every rule in
.claude/rules/*.mdhas entry in.claude/rules.md - Every catalog entry resolves to real file
CLAUDE.mdstill links to catalog- "By concern" table reflects current development axes (add rows for new concerns; remove for retired)
- "By auto-load path" table matches actual
paths:frontmatter in each rule file
Run task claude:tests — structural tests catch most drift automatically (test_catalog_covers_all_rules, test_catalog_references_resolve, test_claude_md_points_to_catalog). Manual review catches semantic drift (e.g., new concern worth catalog row even if no test complains).
research — Deep-Dive Topic
Invoke canonical multi-agent research primitive from /swarm-plan (Phases 1-2). No reinvent.
- Spawn workers parallel — per
/swarm-planPhase 2 axis-splitting:
worker-researcher× 2-3, split by axis:- Tooling axis — Claude Code / AI tooling best practices
- Domain axis — Rust patterns, OCI spec, cargo-deny, etc.
- Community axis — how other projects handle this
worker-explorer(optional) — ground external findings in existing.claude/artifacts
- Synthesize → Actionable guidance. Persist as
.claude/artifacts/research_[topic].md - Apply → Update relevant artifacts
Refresh Targets
| Artifact | What goes stale | Refresh trigger | |----------|----------------|-----------------| | subsystem-*.md rules | Types, paths, signatures, error variants | After refactors, new modules | | quality-rust.md (+ other quality-*.md) | Language anti-patterns, async conventions, 2026 updates | After edition/release updates, new tooling | | arch-principles.md | Design principles, ADR index, code style conventions | After new patterns, new modules | | Persona skills | Implementation patterns, fixtures, commands | After new commands, workflows | | Agent definitions | Patterns, self-review checklists | After quality-*.md changes | | deps | License allowlist, tool versions | After deny.toml changes | | CLAUDE.md | Build commands, env vars, layout | After new crates, env vars | | meta-ai-config.md | Conventions, budget numbers, anti-patterns | After Claude Code releases | | This skill | Modes, workflow, refresh targets | After Claude Code releases |
Maintenance Schedule
| Frequency | Action | |-----------|--------| | Every feature branch | audit before merging AI config changes | | Monthly | refresh to detect drift | | On Claude Code update | research "Claude Code new features" then self-update | | On new tool integration | create for tool's skill/rule, then audit | | When something feels off | review recent changes |
Constraints
- ALWAYS research online before creating AI artifacts
- ALWAYS spawn at least one
worker-researcherfor domain knowledge - ALWAYS check context budget impact (adding always-loaded context?)
- NEVER remove artifacts without checking cross-references first
- NEVER edit
settings.jsonhooks without testing hook script - Prefer hooks over rules for enforcement (deterministic + zero context cost)
- Commits use
chore:prefix (per project convention)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: grimoire-rs
- Source: grimoire-rs/grimoire
- License: Apache-2.0
- Homepage: https://grimoire.rs
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.