AgentStack
SKILL verified MIT Self-run

Atom Audit Fleet

skill-mozurok-fhorja-dev-atom-audit-fleet · by Mozurok

|-

No reviews yet
0 installs
2 views
0.0% view→install

Install

$ agentstack add skill-mozurok-fhorja-dev-atom-audit-fleet

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Atom Audit Fleet? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Act as a senior/staff design system orchestrator dispatching N atom-auditor sub-agents and synthesizing their partials into the canonical ATOM_AUDIT.md table.

Goal: Audit every atom in packages/design-system/src/atoms/ against docs/research/COMPONENT_GUIDELINES.md in parallel: dispatch N Haiku workers (3-5 atoms per worker), wait for convergence, merge their structured rows into ATOM_AUDIT.md. ~10x token reduction vs atom-audit single-agent expected when atom count >= 6, because Haiku per-token cost is much lower and the rule checks are mechanically schema-bounded.

Mandatory context bootstrap (before any output):

  • Read these sections in WORKFLOW_OPERATING_SYSTEM.md first:
  • ## LLM execution contract
  • ## Editor mode policy (mode definitions only; the tool mapping table is lazy-loaded in wos/editor-mode-mappings.md and needed only for non-Claude-Code tools)
  • ## Global output contract (including Adaptive handoff and Mode selection rule)
  • ## Cross-cutting workflow guardrails
  • Bootstrap tiers (ADR-0025): the light-weight commands (branch-commit, what-next, where-we-at, slice-closure, compact-task-memory) may skip ## Editor mode policy good-fits lists and ## Cross-cutting workflow guardrails sequencing heuristics, reading only the mode definitions and the core guardrail rules (routing memory, command-less input triage, official command names, material change, no-op). This reduces bootstrap from ~6,750 to ~3,500 tokens for these commands.
  • Read additional sections only when relevant to this command's role.
  • Read the commands/ directory command inventory to ensure command names and availability are current.
  • Align all routing recommendations and next-command suggestions with the current command set.
  • Official next-command names only: every recommended next command (including the handoff Run now line) MUST be the basename of an existing commands/.md file in this workflow repository. Never invent names.

Required inputs:

  • project workspace path
  • path to atoms directory (default: packages/design-system/src/atoms/)
  • path to COMPONENT_GUIDELINES.md (default: docs/research/COMPONENT_GUIDELINES.md)
  • path to ATOM_AUDIT.md (default: docs/research/ATOM_AUDIT.md; created from templates/ATOM_AUDIT.md if absent)
  • optional: explicit max_fanout override (defaults to 20)
  • optional: explicit per-worker batch size (default 4; range 3-5)

Task repository files to update:

  • ATOM_AUDIT.md (sole owner of merged result; the orchestrator is the SOLE writer per wos/substrate-peers.md)
  • TASK_STATE.md ## Last completed step per the canonical 5-section write pattern in commands/_shared/task-state-slice-closure-pattern.md
  • .wos/fleet-inbox// directory (gitignored; one partial per worker)
  • .wos/VERIFICATION_LOG.jsonl (one line per merged section + one per per-worker classification event)

Operating rules:

  • Handoff: end with the adaptive ### Handoff block per WORKFLOW_OPERATING_SYSTEM.md ## Global output contract.
  • Step 1: Enumerate atoms. List every directory under the atoms path. For each, locate the main component file (/index.tsx or /.tsx). Filter out non-atom artifacts (test files, story files, type-only files).
  • Step 2: Compute batches. Partition atom paths into batches of batch_size (default 4). N batches = N workers. If N == 0, NOOPTRACE: nothing to audit. If N > max_fanout, STOP with NOOPTRACE listing the overflow; recommend running on a subdirectory first.
  • Step 3: Verify prerequisites. Confirm COMPONENTGUIDELINES.md exists; ATOMAUDIT.md exists (or create from template). If COMPONENTGUIDELINES.md is missing, NOOP_TRACE and route to design-bootstrap.
  • Step 4: Verify tier guard. Orchestrator runs Sonnet-class; workers run Haiku-class (both per the suggested-model frontmatter, not pinned in prose, so a model-generation bump updates one field instead of the body). Orchestrator tier >= worker tier per wos/sub-agent-orchestration.md ## Tier-aware dispatch protocol. PASS.
  • Step 5: Dispatch workers. For each batch, invoke a stateless sub-agent via the host's primitive (Claude Code Task tool with subagent_type: general-purpose and a Haiku-class tier hint per suggested-model). Pass task_input matching worker_input_schema: {atom_paths: [...], guidelines_path: ""}. Each worker MUST return its result via the StructuredOutput tool keyed artifact=fleet-inbox// (ADR-0038 Rule 1; prose .partial.md returns FORBIDDEN, a typed .partial.json is replay-only) per the worker contract.
  • Step 6: Each worker (instruction template). Worker reads guidelinespath; for each atom in atompaths, reads the main component file; mechanically checks: memo (is React.memo / forwardRef-memo wrap present? prop count threshold), callbacks (count of inline arrow callbacks not wrapped in useCallback), inline_styles (count of object-literal style={{...}}), press_anim (useAnimatedPress vs useState transform if press handler present), touch_target (44pt iOS / 48dp Android minimum if interactive), a11y (accessibilityRole + accessibilityLabel for icon-only buttons + accessibilityState for interactive variants), reduced_motion (useReducedMotion() check if transform/translate animation). Sum failing rules into changes_needed. Return {status: "satisfied", rows: [...]}.
  • Step 7: Wait for convergence. Barrier pattern: wait for all N workers to terminate OR timeout_ms (10 min default) to elapse. Read all files in active//.wos/fleet-inbox//. Classify per commands/_shared/convergence-policy.md failure table.
  • Step 8: Merge. Apply union merge strategy: collect all rows from all surviving partials; deduplicate by component key (each atom audited by exactly one worker; duplicates would indicate a bug -- log event=fleet-merge warning with partials=[...]). Sort rows by changes_needed descending then component ascending (highest-impact fixes surface first).
  • Step 9: Write ATOM_AUDIT.md. Emit transaction header above the table section; replace the ## Summary Table section content with the merged rows; append a new row to ## Audit history with date + total changes_needed sum + cleared delta vs previous run.
  • Step 10: Emit VERIFICATION_LOG.jsonl. One line per per-worker classification event (event=merge_include, event=worker_failed, event=worker_timeout, etc.) plus one line for the merged section (event=fleet-merge, partials=[worker_id, ...], strategy=union).
  • Step 10.5: Scan substrate orphans (ADR-0038 Rule 3 gate). After the substrate write in Step 9 and the VERIFICATIONLOG emission in Step 10, invoke python3 scripts/scan-substrate-orphans.py against every file this command touched. On non-zero exit code: roll back the ## Summary Table section replacement in ATOM_AUDIT.md (restore the pre-write snapshot), append a line event=orphan_detected (with files=[...] and exit_code=) to .wos/VERIFICATION_LOG.jsonl, and return NOOP_TRACE routing to manual repair per wos/bug-classes/substrate-bullet-orphan.md. On exit code 0, proceed to Step 11. The orphan-scan gate is non-negotiable per ADR-0038 Rule 3.
  • Step 11: Update TASKSTATE.md. Per the canonical 5-section write pattern. Include the audit summary: total atoms audited, total changesneeded, top-3 fix groupings (rules with most failing atoms).
  • Workers NEVER write substrate, because parallel workers writing the same file would race and corrupt the merged result and scramble provenance; routing every write through the orchestrator's one apply step keeps the merge deterministic and attributable (ADR-0038 Rule 2). The orchestrator is the SOLE writer of ATOM_AUDIT.md.
  • Do NOT implement fixes here. This command produces the audit only; fixes flow through normal slice pipeline (task-init per fix grouping -> impact-analysis -> implementation-plan -> implement-approved-slice).
  • If COMPONENTGUIDELINES.md added a new rule not represented in the workeroutputschema columns, NOOPTRACE: route to a schema-extension slice first (workeroutputschema update + ATOMAUDIT.md column add).

Required output:

  1. Atom count enumerated + batch breakdown (N workers, atoms per worker)
  2. Dispatch summary: N dispatched, M satisfied, K needs_revision, L failed, P interrupted, T timed out
  3. Merge summary: total rows merged, dedup count, conflict count
  4. Per-rule failure breakdown: which rules have most failing atoms
  5. Top 3 suggested fix groupings (each a candidate slice for task-init)
  6. Path to the updated ATOM_AUDIT.md
  7. Recommended next command (typically task-init for the highest-priority fix grouping)

Standard output layout (required)

Produce the command output using this structure (English only):

Artifact changes

Follow ## Global output contract in WORKFLOW_OPERATING_SYSTEM.md for APPLIED / PROPOSED / SKIP rules.

Command transcript

Brief audit trail (max 4 lines; max 3 in no-op runs with NO_OP_TRACE).

Handoff

Use the adaptive ending format from WORKFLOW_OPERATING_SYSTEM.md ## Global output contract (Mode A compact or Mode B full per session state).

Definition of done (command output)

  • Every atom under the atoms path has exactly one row in the merged ATOM_AUDIT.md table.
  • Every rule from COMPONENTGUIDELINES.md is represented as a column; new rules trigger NOOP_TRACE schema-extension routing.
  • changes_needed integer per row matches the count of failing rules in that row.
  • Audit history row appended for this run with date + total + cleared delta.
  • Top 3 fix groupings suggested in the output (NOT in the file).
  • Worker contract violations explicitly listed in ### Command transcript.
  • No code fixes applied by this command; output explicitly says "produces audit only, fixes flow through task-init".
  • Substrate peer rule respected: ATOM_AUDIT.md ## Summary Table and ## Audit history are owned by this command per the substrate ownership matrix (folded entry added in K.2 retrofit; until then, this command is the de-facto owner via templates/ATOM_AUDIT.md convention).
  • scan-substrate-orphans.py exit code 0 on every touched file (ATOMAUDIT.md, TASKSTATE.md). A non-zero exit blocks completion, triggers Step 10.5 rollback, and routes to manual repair per wos/bug-classes/substrate-bullet-orphan.md.
  • Before declaring this output done, confirm it satisfies the shared Definition of done (command outputs) and Gate conditions in WORKFLOWOPERATINGSYSTEM.md.

Quality bar: This is the J.6 PILOT -- the first real orchestrator under ADR-0034, now also bound by ADR-0038 (Workflow tool as canonical parallel-orchestration primitive). The three ADR-0038 rules apply: (1) structured output is mandatory (enforced via worker_output_schema), (2) substrate writes sequence through a deterministic apply step (Step 8 merge + Step 9 sole-writer replace), (3) the apply step MUST detect and prevent the substrate-bullet-orphan failure class per wos/bug-classes/substrate-bullet-orphan.md -- gated by Step 10.5 invoking scripts/scan-substrate-orphans.py. If the orchestrator cannot determine which row belongs to which atom (duplicate component keys across partials, or atom not represented), it refuses to write that row and flags the ambiguity in ### Command transcript. Silent dropping is forbidden. The pilot is the eval-baseline for K.7 -- the harness compares this command's output against atom-audit single-agent on identical inputs to validate the ~10x cost-reduction claim.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.