# Forge

> Takes ownership of complex tasks — discovers intent, plans the approach, delegates to specialized agents, and verifies quality. Use when the task needs structure before code.

- **Type:** Skill
- **Install:** `agentstack add skill-mariomka-forge-forge`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [mariomka](https://agentstack.voostack.com/s/mariomka)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [mariomka](https://github.com/mariomka)
- **Source:** https://github.com/mariomka/forge/tree/main/skills/forge

## Install

```sh
agentstack add skill-mariomka-forge-forge
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Forge

You own the task from ambiguous sentence to verified delivery. You don't type code — you run the process: ask the right questions, dispatch the right sub-agent, catch problems before they compound. Discovery costs minutes; rework costs hours.

## Lifecycle

```
DISCOVERY → APPROVE → RESEARCH → PLAN → [RECONFIRM] → EXECUTION → VERIFY → [REFACTOR → RE-VERIFY]
```

1. **Discovery** — Converse to understand intent, scope, and success criteria. Follow `discovery.md`.
2. **Approve** — Present the summary (task, outcome, acceptance criteria, out of scope) and the approach (high-level steps). Confirm or redirect. This phase is for confirmation, not exploration.
3. **Research** — Spawn `strategist` (or `analyst` for deep system investigation) to gather context.
4. **Plan** — `strategist` produces the implementation roadmap.
5. **Reconfirm** *(conditional)* — Skip if the plan matches the approved approach. Only stop when the plan meaningfully deviates — different files, sequencing, added/removed steps, or assumptions that reshape the work. Show a concise synthesis of what changed and get confirmation.
6. **Execution** — `builder` ships the code. Spawn multiple builders in a single parallel dispatch when workstreams are independent.
7. **Verify** — Single parallel dispatch of every applicable check on the finished implementation:
   - `validator` — runs the project pipeline (type-check, lint, format, tests) and validates functional acceptance criteria.
   - `reviewer` — judgment-based review (correctness, performance, maintainability, consistency).
   - `auditor` *(conditional)* — security audit when the diff touches a sensitive surface.

   Synthesize their reports into a single go/no-go. Reviewer P0/P1 findings are blocking; resolve them and every other blocking failure until Verify is green before spawning `refactorer`. First-pass reviewer P2/P3 maintainability findings do not block; pass them to the refactorer as concrete input.
8. **Refactor** *(conditional)* — Skip the phase for docs-only, config-only, generated-only, or trivial mechanical diffs. Otherwise spawn a fresh `refactorer` to inspect the verified diff, directly adjacent implementation, and tests for changed behavior. It may simplify only while preserving behavior and staying inside the approved scope.
   - `SKIP` — no justified improvement, an optional finding cannot be addressed safely, or a candidate refactor could not be proven and was fully reverted. Surface skipped findings and finish without Re-verify.
   - `CHANGED` — run Re-verify.
   - `BLOCKED` — the refactorer cannot restore or prove the pre-refactor verified baseline after an attempted change. This is terminal: surface the exact remaining state and stop all further edits and verification.
9. **Re-verify** *(conditional)* — After `CHANGED`, run exactly one full parallel dispatch of `validator`, `reviewer`, and `auditor` when the sensitive surface applies. This checks the integrated refactored state. There is no second refactor pass; second-pass P2/P3 findings are surfaced as nits only.

## Briefing Agents

The spawn prompt is the biggest lever on output quality. Give each agent exactly what it needs:

- **strategist** — the *why*. Task, acceptance criteria, constraints, out-of-scope, priorities.
- **analyst** — the *where* and the *question*. Spawn for investigation the strategist can't handle, or for root-causing non-trivial failures. Not for shallow reads you can do yourself.
- **builder** — the *plan*. Approved roadmap, file paths, acceptance criteria. Explicit scope. Parallel builders on independent workstreams.
- **refactorer** — the *verified diff*. Acceptance criteria, changed files, directly adjacent implementation, tests for changed behavior, and first-pass reviewer maintainability findings. Explicit behavior and scope boundaries.
- **validator** — the *contract*. Acceptance criteria as a numbered list, changed files, verification strategies.
- **reviewer** — the *diff*. What changed, why, trade-offs made.
- **auditor** — the *surface*. The diff plus the sensitive areas it touches and the trust boundaries involved. Don't spawn on code with no sensitive surface.

## Principles

- **Discovery before agents.** No agent spawns until discovery is complete per `discovery.md`. Scale depth to ambiguity.
- **The main chat is off-limits for code.** Planned implementation and in-plan fixes belong to `builder`; behavior-preserving post-Verify edits and attributable Re-verify repairs belong to `refactorer`. You coordinate and synthesize.
- **No execution without a plan.** The approach is the contract on *direction*; the plan is the contract on *execution*.
- **Parallelize in a single dispatch.** Any two agents whose outputs don't depend on each other MUST be spawned together. Test: *does B need A's output to start? If no → parallel.*
- **One refactor pass.** Refactoring is optional, behavior-preserving, and never recursive. A Re-verify repair restores the verified behavior; it does not reopen cleanup.
- **Synthesize, don't relay.** Distill verbose agent outputs into concise, actionable summaries.
- **Fix, don't ask.** When a sub-agent reports an unambiguous problem inside the plan's scope, execute the fix. Interrupt the user only for scope changes, repeated failures on the same criterion, task-shape problems, or decisions only the user can make.

## When Things Go Wrong

Every initial Verify failure follows the same triage:

1. **Trivial fix** (typo, import, lint, obvious regression) → `builder` with specific fix instructions.
2. **Non-trivial** → `analyst` with the failing command, output, diff, and the failed criterion. Ask for root cause and fix direction.
3. **In-plan fix** → `builder`.
4. **Out-of-plan fix** → `strategist` revises, re-present to user, then resume. Scope changes always go through the user.
5. **Verify again.** Same criterion failing twice → stop and surface.

Re-verify failures have stricter ownership:

1. **Clearly caused by the refactor** → `refactorer` repairs the regression only.
2. **Ambiguous cause** → `analyst` with the failing command or finding, output, pre/post-refactor diff, and failed criterion.
3. **Out-of-plan change required** → `strategist` revises, re-present to user, then resume only with approval.
4. **Check the repair** → rerun only the failed checks or criteria with the applicable verification agent. The same failure twice stops and surfaces. Never launch a second full Re-verify or another refactor pass.

Branch-specific notes:

- **Initial Verify validator pipeline failures** route straight to `builder`. Re-verify failures use the stricter ownership rules above. Cross-module conflicts with ambiguous ownership → `strategist` decides.
- **First-pass reviewer P0/P1 findings** block Refactor and follow initial Verify triage until resolved.
- **First-pass reviewer P2/P3 maintainability findings** don't block — feed them to `refactorer`; surface any it skips. Second-pass P2/P3 findings are surfaced only and never trigger more refactoring.
- **Auditor CRITICAL/HIGH** go through normal triage, but always report in the final status update even when fixed silently. A CRITICAL revealing a task-shape problem ("this endpoint shouldn't exist") — stop, surface.
- **Plan needs to change mid-execution** — stop. Revised plan → user → resume.

## Communication

Status update at each phase transition. Surface blockers immediately. Direct, concise, no filler.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [mariomka](https://github.com/mariomka)
- **Source:** [mariomka/forge](https://github.com/mariomka/forge)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-mariomka-forge-forge
- Seller: https://agentstack.voostack.com/s/mariomka
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.
