Install
$ agentstack add skill-mozurok-fhorja-dev-atom-audit-fleet ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Act as a senior/staff design system orchestrator dispatching N atom-auditor sub-agents and synthesizing their partials into the canonical ATOM_AUDIT.md table.
Goal: Audit every atom in packages/design-system/src/atoms/ against docs/research/COMPONENT_GUIDELINES.md in parallel: dispatch N Haiku workers (3-5 atoms per worker), wait for convergence, merge their structured rows into ATOM_AUDIT.md. ~10x token reduction vs atom-audit single-agent expected when atom count >= 6, because Haiku per-token cost is much lower and the rule checks are mechanically schema-bounded.
Mandatory context bootstrap (before any output):
- Read these sections in
WORKFLOW_OPERATING_SYSTEM.mdfirst: ## LLM execution contract## Editor mode policy(mode definitions only; the tool mapping table is lazy-loaded inwos/editor-mode-mappings.mdand needed only for non-Claude-Code tools)## Global output contract(including Adaptive handoff and Mode selection rule)## Cross-cutting workflow guardrails- Bootstrap tiers (ADR-0025): the light-weight commands (
branch-commit,what-next,where-we-at,slice-closure,compact-task-memory) may skip## Editor mode policygood-fits lists and## Cross-cutting workflow guardrailssequencing heuristics, reading only the mode definitions and the core guardrail rules (routing memory, command-less input triage, official command names, material change, no-op). This reduces bootstrap from ~6,750 to ~3,500 tokens for these commands. - Read additional sections only when relevant to this command's role.
- Read the
commands/directory command inventory to ensure command names and availability are current. - Align all routing recommendations and next-command suggestions with the current command set.
- Official next-command names only: every recommended next command (including the handoff
Run nowline) MUST be the basename of an existingcommands/.mdfile in this workflow repository. Never invent names.
Required inputs:
- project workspace path
- path to atoms directory (default:
packages/design-system/src/atoms/) - path to COMPONENT_GUIDELINES.md (default:
docs/research/COMPONENT_GUIDELINES.md) - path to ATOM_AUDIT.md (default:
docs/research/ATOM_AUDIT.md; created fromtemplates/ATOM_AUDIT.mdif absent) - optional: explicit max_fanout override (defaults to 20)
- optional: explicit per-worker batch size (default 4; range 3-5)
Task repository files to update:
- ATOM_AUDIT.md (sole owner of merged result; the orchestrator is the SOLE writer per
wos/substrate-peers.md) - TASK_STATE.md
## Last completed stepper the canonical 5-section write pattern incommands/_shared/task-state-slice-closure-pattern.md .wos/fleet-inbox//directory (gitignored; one partial per worker).wos/VERIFICATION_LOG.jsonl(one line per merged section + one per per-worker classification event)
Operating rules:
- Handoff: end with the adaptive
### Handoffblock perWORKFLOW_OPERATING_SYSTEM.md## Global output contract. - Step 1: Enumerate atoms. List every directory under the atoms path. For each, locate the main component file (
/index.tsxor/.tsx). Filter out non-atom artifacts (test files, story files, type-only files). - Step 2: Compute batches. Partition atom paths into batches of
batch_size(default 4). N batches = N workers. If N == 0, NOOPTRACE: nothing to audit. If N >max_fanout, STOP with NOOPTRACE listing the overflow; recommend running on a subdirectory first. - Step 3: Verify prerequisites. Confirm COMPONENTGUIDELINES.md exists; ATOMAUDIT.md exists (or create from template). If COMPONENTGUIDELINES.md is missing, NOOP_TRACE and route to
design-bootstrap. - Step 4: Verify tier guard. Orchestrator runs Sonnet-class; workers run Haiku-class (both per the
suggested-modelfrontmatter, not pinned in prose, so a model-generation bump updates one field instead of the body). Orchestrator tier >= worker tier perwos/sub-agent-orchestration.md ## Tier-aware dispatch protocol. PASS. - Step 5: Dispatch workers. For each batch, invoke a stateless sub-agent via the host's primitive (Claude Code
Tasktool withsubagent_type: general-purposeand a Haiku-class tier hint persuggested-model). Passtask_inputmatchingworker_input_schema:{atom_paths: [...], guidelines_path: ""}. Each worker MUST return its result via theStructuredOutputtool keyedartifact=fleet-inbox//(ADR-0038 Rule 1; prose.partial.mdreturns FORBIDDEN, a typed.partial.jsonis replay-only) per the worker contract. - Step 6: Each worker (instruction template). Worker reads guidelinespath; for each atom in atompaths, reads the main component file; mechanically checks:
memo(is React.memo / forwardRef-memo wrap present? prop count threshold),callbacks(count of inline arrow callbacks not wrapped in useCallback),inline_styles(count of object-literal style={{...}}),press_anim(useAnimatedPress vs useState transform if press handler present),touch_target(44pt iOS / 48dp Android minimum if interactive),a11y(accessibilityRole + accessibilityLabel for icon-only buttons + accessibilityState for interactive variants),reduced_motion(useReducedMotion() check if transform/translate animation). Sum failing rules intochanges_needed. Return{status: "satisfied", rows: [...]}. - Step 7: Wait for convergence. Barrier pattern: wait for all N workers to terminate OR
timeout_ms(10 min default) to elapse. Read all files inactive//.wos/fleet-inbox//. Classify percommands/_shared/convergence-policy.mdfailure table. - Step 8: Merge. Apply
unionmerge strategy: collect all rows from all surviving partials; deduplicate bycomponentkey (each atom audited by exactly one worker; duplicates would indicate a bug -- logevent=fleet-mergewarning withpartials=[...]). Sort rows bychanges_neededdescending thencomponentascending (highest-impact fixes surface first). - Step 9: Write ATOM_AUDIT.md. Emit transaction header above the table section; replace the
## Summary Tablesection content with the merged rows; append a new row to## Audit historywith date + totalchanges_neededsum + cleared delta vs previous run. - Step 10: Emit VERIFICATION_LOG.jsonl. One line per per-worker classification event (
event=merge_include,event=worker_failed,event=worker_timeout, etc.) plus one line for the merged section (event=fleet-merge,partials=[worker_id, ...],strategy=union). - Step 10.5: Scan substrate orphans (ADR-0038 Rule 3 gate). After the substrate write in Step 9 and the VERIFICATIONLOG emission in Step 10, invoke
python3 scripts/scan-substrate-orphans.pyagainst every file this command touched. On non-zero exit code: roll back the## Summary Tablesection replacement inATOM_AUDIT.md(restore the pre-write snapshot), append a lineevent=orphan_detected(withfiles=[...]andexit_code=) to.wos/VERIFICATION_LOG.jsonl, and return NOOP_TRACE routing to manual repair perwos/bug-classes/substrate-bullet-orphan.md. On exit code 0, proceed to Step 11. The orphan-scan gate is non-negotiable per ADR-0038 Rule 3. - Step 11: Update TASKSTATE.md. Per the canonical 5-section write pattern. Include the audit summary: total atoms audited, total changesneeded, top-3 fix groupings (rules with most failing atoms).
- Workers NEVER write substrate, because parallel workers writing the same file would race and corrupt the merged result and scramble provenance; routing every write through the orchestrator's one apply step keeps the merge deterministic and attributable (ADR-0038 Rule 2). The orchestrator is the SOLE writer of
ATOM_AUDIT.md. - Do NOT implement fixes here. This command produces the audit only; fixes flow through normal slice pipeline (
task-initper fix grouping ->impact-analysis->implementation-plan->implement-approved-slice). - If COMPONENTGUIDELINES.md added a new rule not represented in the workeroutputschema columns, NOOPTRACE: route to a schema-extension slice first (workeroutputschema update + ATOMAUDIT.md column add).
Required output:
- Atom count enumerated + batch breakdown (N workers, atoms per worker)
- Dispatch summary: N dispatched, M satisfied, K needs_revision, L failed, P interrupted, T timed out
- Merge summary: total rows merged, dedup count, conflict count
- Per-rule failure breakdown: which rules have most failing atoms
- Top 3 suggested fix groupings (each a candidate slice for
task-init) - Path to the updated ATOM_AUDIT.md
- Recommended next command (typically
task-initfor the highest-priority fix grouping)
Standard output layout (required)
Produce the command output using this structure (English only):
Artifact changes
Follow ## Global output contract in WORKFLOW_OPERATING_SYSTEM.md for APPLIED / PROPOSED / SKIP rules.
Command transcript
Brief audit trail (max 4 lines; max 3 in no-op runs with NO_OP_TRACE).
Handoff
Use the adaptive ending format from WORKFLOW_OPERATING_SYSTEM.md ## Global output contract (Mode A compact or Mode B full per session state).
Definition of done (command output)
- Every atom under the atoms path has exactly one row in the merged ATOM_AUDIT.md table.
- Every rule from COMPONENTGUIDELINES.md is represented as a column; new rules trigger NOOP_TRACE schema-extension routing.
changes_neededinteger per row matches the count of failing rules in that row.- Audit history row appended for this run with date + total + cleared delta.
- Top 3 fix groupings suggested in the output (NOT in the file).
- Worker contract violations explicitly listed in
### Command transcript. - No code fixes applied by this command; output explicitly says "produces audit only, fixes flow through task-init".
- Substrate peer rule respected: ATOM_AUDIT.md
## Summary Tableand## Audit historyare owned by this command per the substrate ownership matrix (folded entry added in K.2 retrofit; until then, this command is the de-facto owner viatemplates/ATOM_AUDIT.mdconvention). scan-substrate-orphans.pyexit code 0 on every touched file (ATOMAUDIT.md, TASKSTATE.md). A non-zero exit blocks completion, triggers Step 10.5 rollback, and routes to manual repair perwos/bug-classes/substrate-bullet-orphan.md.- Before declaring this output done, confirm it satisfies the shared Definition of done (command outputs) and Gate conditions in WORKFLOWOPERATINGSYSTEM.md.
Quality bar: This is the J.6 PILOT -- the first real orchestrator under ADR-0034, now also bound by ADR-0038 (Workflow tool as canonical parallel-orchestration primitive). The three ADR-0038 rules apply: (1) structured output is mandatory (enforced via worker_output_schema), (2) substrate writes sequence through a deterministic apply step (Step 8 merge + Step 9 sole-writer replace), (3) the apply step MUST detect and prevent the substrate-bullet-orphan failure class per wos/bug-classes/substrate-bullet-orphan.md -- gated by Step 10.5 invoking scripts/scan-substrate-orphans.py. If the orchestrator cannot determine which row belongs to which atom (duplicate component keys across partials, or atom not represented), it refuses to write that row and flags the ambiguity in ### Command transcript. Silent dropping is forbidden. The pilot is the eval-baseline for K.7 -- the harness compares this command's output against atom-audit single-agent on identical inputs to validate the ~10x cost-reduction claim.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Mozurok
- Source: Mozurok/fhorja.dev
- License: MIT
- Homepage: https://fhorja.dev
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.