AgentStack
SKILL verified MIT Self-run

Speq Code Guardrails

skill-marconae-speq-skill-speq-code-guardrails · by marconae

TDD and code quality guardrails triggered by speq-implement.

No reviews yet
0 installs
11 views
0.0% view→install

Install

$ agentstack add skill-marconae-speq-skill-speq-code-guardrails

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Speq Code Guardrails? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Code Guardrails

Clean Code (Martin) TDD workflow and quality guardrails.

Golden Rule

No production code without a failing test first.

Evidence Rule

No claim without evidence. Run command, show output, then claim.

TDD Cycle (London School)

RED    → Write failing test, run it, show failure
GREEN  → Minimal code to pass, run test, show pass
REFACTOR → Clean up, run test + lint, show output

Run ONLY the test you created/changed — not the full suite.

Guiding Principles

| Principle | Meaning | |-----------|---------| | KISS | Simplest solution that works | | YAGNI | Build for now, not hypotheticals | | DRY | Extract duplication, don't copy-paste | | Single Responsibility (SOLID) | One function = one purpose | | Boy Scout | Leave code cleaner than you found it | | Root Cause | Five Whys — fix the source, not the symptom |

Design

  • Config at high levels, behavior at low levels
  • Polymorphism over conditionals
  • Dependency injection for testability
  • Law of Demeter: talk only to immediate collaborators

Functions

  • Small and focused
  • Few arguments (≤3 ideal)
  • No side effects
  • No boolean flags — split into separate methods

Naming

  • Descriptive, unambiguous, pronounceable
  • Named constants over magic numbers
  • No prefixes or type encodings

Comments

  • Public/interface methods: brief doc comment (purpose only)
  • Private methods: no comments
  • No inline comments — code should be self-explanatory
  • No work tracking (TODOs, FIXMEs, ticket refs)

Code Smells

| Smell | Signal | |-------|--------| | Rigidity | Small changes cascade everywhere | | Fragility | One change breaks unrelated code | | Immobility | Can't reuse code elsewhere | | Opacity | Hard to understand at a glance |

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.