Install
$ agentstack add skill-mmccalla-coding-agent-skill-library-eip-integration-validation ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
EIP Integration Validation
When to use
Use after producing or receiving an integration design, architecture decision record, sequence diagram, event contract, API/event topology, broker configuration or implementation plan that should be checked against Enterprise Integration Patterns and production operability criteria.
Objective
Review integration designs and implementations against EIP, distributed-systems risks and production operability criteria, and return severity-rated findings with precise remediation.
Procedure
- Classify each integration interaction as command, event, document, request/reply, stream, batch or query.
- Map each interaction to EIP categories:
- Integration style.
- Channel.
- Message construction.
- Routing.
- Transformation.
- Endpoint.
- System management.
- Check correctness:
- Pattern selection fits the problem.
- Message intent is not ambiguous.
- Contracts are versioned and testable.
- Routing, correlation and sequencing are explicit.
- Transformation preserves semantics.
- Endpoint transaction and acknowledgement behaviour is safe.
- Check resilience:
- Duplicate handling.
- Retry and backoff.
- Dead-letter and invalid-message paths.
- Back-pressure and consumer lag.
- Ordering and replay.
- Disaster recovery.
- Check governance:
- Ownership of messages, channels and schemas.
- Data minimisation and PII handling.
- Access control and encryption.
- Auditability and retention.
- Operational runbooks.
- Rate issues by severity: Critical, High, Medium, Low.
- Provide precise remediation steps, not generic advice.
Required outputs
- Executive summary
- Pattern mapping table
- Findings by severity
- Recommended design changes
- Residual risks
- Test cases required before production
Acceptance criteria
- Every integration flow has a named pattern or a justified exception.
- Every message has intent, schema, owner, version and metadata.
- Every channel has ownership, security, retention and error handling.
- Every consumer has retry, idempotency and acknowledgement behaviour.
- Every production flow has observability and runbook coverage.
Guardrails
- Do not approve designs that lack dead-letter or invalid-message handling for critical flows.
- Do not approve non-idempotent consumers for at-least-once delivery unless duplicate delivery is impossible by construction.
- Do not approve canonical models without ownership and version governance.
- Do not approve designs where routing, transformation or process state is undocumented.
Related skills
message-based-integration-designmessage-channel-designintegration-message-constructionmessage-routing-designmessage-transformation-designmessage-endpoint-designmessaging-system-managementcode-review-and-quality
Verification
- [ ] Each flow is mapped to an EIP category or justified exception.
- [ ] Findings are severity-rated with remediation steps.
- [ ] Resilience and governance checks are complete.
- [ ] Residual risks and required tests are stated.
- [ ] Acceptance criteria are assessed explicitly.
References
- EIP Table of Contents
- EIP — Messaging Systems introduction
- EIP — Messaging Channels introduction
- EIP — Message Construction introduction
- EIP — Message Routing introduction
- EIP — Message Transformation introduction
- EIP — Messaging Endpoints introduction
- EIP — System Management introduction
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mmccalla
- Source: mmccalla/coding-agent-skill-library
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.