Install
$ agentstack add skill-mapuamap-denys-fast-mskills-m-code-init-project ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
mcodeinit_project
Initialize a repository so Claude and humans can repeatedly build, test, review, and change it safely.
Contract
Use $ARGUMENTS as the project goal, stack, repo path, and constraints.
Default behavior:
- Empty repo: create the smallest useful baseline.
- Existing repo: harden current conventions; do not overwrite them silently.
- Ambiguous stack: infer from files; if still unclear, state the assumption before editing.
- Do not create or commit secrets, tokens, private keys, production URLs, or real customer data.
- Do not add broad tool permissions or auto-approval rules.
Workflow
1. Inspect before writing
For an existing repo of any size, delegate the wide scan to the m_code-context-scout agent and keep only its map — that keeps the raw inspection out of your main context. Read only what is needed:
- git status
- top-level tree
- package/build files
- README/docs
- test/lint/type/build config
- existing CLAUDE.md, AGENTS.md, .github/copilot-instructions.md, .claude/rules
- CI config if present
Report:
Project kind:
Language/stack:
Package manager:
Existing commands:
Existing tests:
Current architecture shape:
Main gaps:
2. Create deterministic commands
Prefer ecosystem-native scripts in the existing package/build config.
Define or document:
install
run/dev
test
test:unit, when useful
test:integration, when useful
typecheck, for typed stacks
lint
format or format:check
build
If a command cannot be configured safely, record it as not configured; do not invent a fake command.
3. Establish minimal boundaries
Use names that fit the stack. Keep the dependency idea even if the folders differ.
entrypoints/ HTTP routes, CLI handlers, workers, UI event handlers
application/ use cases, orchestration, transactions, permissions workflow
domain/ pure rules, policies, entities, value objects
ports/ protocols/interfaces for external systems
adapters/ DB/API/filesystem/framework implementations
shared/ narrow primitives only; no dumping ground
Dependency rule:
entrypoints -> application -> domain
application -> ports
adapters -> ports
adapters may import infrastructure libraries
domain must not import framework, DB, network, env, filesystem, current time, random, or concrete adapters
For small projects, collapse folders and keep boundaries visible through names, imports, and tests. Do not split files only to create layers.
4. Add seams for nondeterminism and external systems
Create explicit seams around:
DB/repository
HTTP/API clients
filesystem
clock/current time
random/ID generation
env/config
queues/jobs
email/payment/SMS providers
feature flags
Use dependency injection appropriate to the language: function parameters, constructor parameters, fixtures, providers, interfaces/protocols, or composition-root wiring.
5. Add first useful tests
Create tests for observable behavior, not private implementation details.
Minimum baseline:
- one unit test for pure domain/application behavior
- one adapter/integration test only if an external boundary exists and can be tested safely
- one regression test if the project is being hardened around a known risky path
Avoid real production services. Use fakes, local fixtures, test containers, or dedicated test instances.
6. Create concise Claude guidance
Create or update root CLAUDE.md. Keep it short enough to load every session.
If the repo already has AGENTS.md, prefer:
@AGENTS.md
# Claude Code notes
-
Recommended CLAUDE.md shape:
# Project guidance
## Project shape
-
- Important code lives in
## Commands
- Install:
- Test:
- Typecheck:
- Lint:
- Build:
## Architecture rules
-
## Testing rules
-
## Done means
- Relevant tests/checks run or explicitly reported as skipped.
- Diff reviewed for behavior, security, and architecture risk.
Move large or path-specific rules into .claude/rules/*.md. Put repeated task playbooks into skills, not CLAUDE.md.
7. Add enforcement only when explicit
Guidance files are not enforcement. If a rule must always happen, propose a hook or CI check instead of relying on text instructions.
Do not add hooks, permission changes, or allowed-tools unless the user explicitly asks and the rule is deterministic and safe.
8. Validate
Run the smallest safe checks available — delegate noisy runs to the m_code-test-runner agent and keep only the summary:
- test or focused test
- typecheck, when configured
- lint or format check, when configured
- build, when configured and safe
Never claim a command passed unless it ran in this session or the user provided the result.
Final response format
Project baseline:
- Kind:
- Stack:
- Package manager:
- Existing repo: yes/no
Files changed:
- :
Architecture baseline:
- Boundaries:
- Seams added:
- Dependency rule:
Commands:
- Install:
- Test:
- Typecheck:
- Lint:
- Build:
Validation:
- : pass/fail/skipped + reason
Remaining gaps:
-
Next step:
-
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mapuamap
- Source: mapuamap/denys-fast-mskills
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.