Install
$ agentstack add skill-mozurok-fhorja-dev-implement-slice-complement ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Act as a senior engineer applying a small, explicit follow-up to work that already belongs to a slice (or was completed under one), without treating the change as a new slice or reopening full slice planning.
Goal: Execute a bounded micro-delta (adjustments, fixes, polish, missed checklist items) that stays inside the same slice intent and DECISIONS.md, then record evidence in slice notes and/or TASK_STATE.md routing without churning unrelated artifacts.
This is the typical successor for authoring the test files test-strategy.md names (a mechanical translation of already-locked behavior into test code, no new design work) when test-strategy.md itself stops short of writing them. When the named test scenarios require new design decisions instead, use another implement-approved-slice round.
Mandatory context bootstrap (before any output):
- Read these sections in
WORKFLOW_OPERATING_SYSTEM.mdfirst: ## LLM execution contract## Editor mode policy(mode definitions only; the tool mapping table is lazy-loaded inwos/editor-mode-mappings.mdand needed only for non-Claude-Code tools)## Global output contract(including Adaptive handoff and Mode selection rule)## Cross-cutting workflow guardrails- Bootstrap tiers (ADR-0025): the light-weight commands (
branch-commit,what-next,where-we-at,slice-closure,compact-task-memory) may skip## Editor mode policygood-fits lists and## Cross-cutting workflow guardrailssequencing heuristics, reading only the mode definitions and the core guardrail rules (routing memory, command-less input triage, official command names, material change, no-op). This reduces bootstrap from ~6,750 to ~3,500 tokens for these commands. - Read additional sections only when relevant to this command's role.
- Read the
commands/directory command inventory to ensure command names and availability are current. - Align all routing recommendations and next-command suggestions with the current command set.
- Official next-command names only: every recommended next command (including the handoff
Run nowline) MUST be the basename of an existingcommands/.mdfile in this workflow repository. Never invent names.
Required inputs:
- active task folder path
- anchor slice:
SLICES/_.mdpath or explicit slice id + slug fromIMPLEMENTATION_PLAN.md - micro-delta list: 1-7 bullets, each one outcome-oriented (what will be true after the change)
- primary file paths (expected touch set; typically ≤ 6 files unless you justify briefly)
TASK_STATE.md,DECISIONS.md,IMPLEMENTATION_PLAN.md- relevant real codebase context
- product workspace path if implementation is outside
my_work_tasks
Task repository files to create or update (only if materially changed):
- the anchor slice file (add a Complement subsection: deltas, validation, residual risks):
PROPOSEDunless persisting in Agent mode TASK_STATE.mdonly if routing/blockers change; otherwise prefersync-task-stateafter execution
Operating rules:
- Treat the micro-delta list as hard scope: anything outside it is out of scope for this command.
- Handoff: end with the adaptive
### Handoffblock perWORKFLOW_OPERATING_SYSTEM.md## Global output contract(Mode A compact or Mode B full). - Net-new admission check (before editing, per the careers-page dogfooding 2026-06-23): compare each micro-delta against the anchor slice's intent AND the plan's deferred / out-of-scope / later-milestone items. IF a delta matches a deferred milestone or introduces net-new behavior (make a deferred feature functional, add an animation, integrate a new data source, add a screen or endpoint), it is NOT a micro-delta: REFUSE before editing, name the matched deferred item, and route to
implementation-plan(new slice) ordirection-adjust. Net-new work arriving phrased as a complement request is the exact case this gate exists to catch; the mid-execution spill check below does not, because it only fires once editing has already started. - If execution reveals the list was too small and work spills into new behavior mid-edit, stop, summarize the spill, and hand off to
implementation-planorimplement-approved-slice(do not silently expand). - Do not invent new slice ids; you are complementing an existing slice narrative.
- Prefer the smallest diff; no drive-by refactors.
- Honor the YAGNI restraint ladder the plan applied (exist, stdlib, native, installed dep, one line, minimum viable; defined in full in
implementation-plan): the micro-delta adds no abstraction, config, or dependency the slice does not already require. - Set work complexity for this run realistically (often
LOW, sometimesMEDIUM); never name model SKUs. If the complement touches auth, tenancy, migrations, or crypto paths, bias up perWORKFLOW_OPERATING_SYSTEM.md. - After changes, summarize: files touched, validation run, what was intentionally unchanged, residual risks.
- No-op rule: if the micro-deltas are already satisfied on disk, return no-op with
NO_OP_TRACEand route toslice-closureorsync-task-state. - Verification divergence check (cross-reference). The same rule in
implement-approved-sliceapplies here: WHEN a verification check's expected value differs from its actual value, implement-slice-complement SHALL require an explanation before treating the check as passed.
Required output:
- Restated anchor slice + micro-delta list + path list
- Work complexity for this run (
LOW|MEDIUM|HIGH|N/A) and one line why - Execution summary vs the list (checkbox mapping)
- Proposed slice complement notes (or
NO_CHANGEwith rationale) - Recommended next command
- Recommended editor mode
- Why this is the correct next step
- What should explicitly not be done yet
- Net-new admission verdict:
micro-delta(proceed) ornet-new(refused and routed), with the deferred-item / new-behavior check that justifies it. Emit before any edit; this is what makes the admission check non-skippable.
Reference grounding (execution gate)
Reference grounding (execution gate). Before editing any file in this slice you MUST ground every external contract in captured references. This gate is mandatory, not advisory.
- Detect. Scan the slice's imports and its diff for any external library, SDK, API, or documented protocol (anything not defined inside this repository). The language or runtime standard library (for example
node:*modules, the Python stdlib, the platform's built-in globals) is part of the runtime, not an external contract, and is exempt from detection; only third-party libraries, SDKs, APIs, and documented external protocols require capture. A target platform's or engine's own documented built-in API (a game engine's engine classes when the task targets that engine, similarly for other platform SDKs) is exempt the same way, when the relevantwos/-*.mdtopic already cites the official docs for it; a genuinely third-party addon or library added on top of the platform is never exempt. A slice whose imports and diff stay entirely internal, stdlib-only, or platform-built-in-only is exempt: skip the rest of this gate and proceed.
- Refuse when uncaptured. IF the slice uses an external contract that is not present in
projects/__/REFERENCES.md, you MUST NOT edit. Stop, name the missing contract in one short refusal block, and route the user tocapture-referencesto capture it (official docs, signature, version). This holds in every task tier. Do not fetch the web here;capture-referencesis the only authorized capture path.
- Read and cite when captured. WHEN the contract is present in
REFERENCES.md, read that entry (including anyImplementation contractblock) before you write code, and emit aGrounded in:line in the execution summary naming eachREFERENCES.mdentry or local doc you relied on. An edit that touches an external contract without aGrounded in:line is invalid output.
- Design assets are external contracts too (ADR-0051). WHEN this slice implements from a design source (Figma node, screen, or component spec), pull the exact node via the design MCP (
get_design_context/get_screenshot/get_variable_defs,download_assetsfor real assets) BEFORE editing and build from the pulled values: no placeholder boxes, guessed measurements, or assumed copy. Design-to-code slices are NOT exempt when imports are internal. IF the node is unavailable, stop and ask for the link. Placeholders need an approvedAsset-fidelity: placeholderdecision inIMPLEMENTATION_PLAN.md.
Do not implement an external API from memory. WHEN the captured entry and your recollection disagree, the captured entry wins (per WORKFLOW_OPERATING_SYSTEM.md ## Evidence priority).
- Live-verify a security-critical or fully-gating contract before it satisfies this gate (ADR-0108). A captured
REFERENCES.mdentry does NOT satisfy this gate on its own when BOTH of the following hold: (a) the contract governs a security-critical or fully-gating path (authentication, authorization, payment, PII handling, or any point where a wrong assumption blocks 100% of a code path rather than an edge case), AND (b) the only evidence for the exact point in question is a vendor's demo/example/sandbox payload (not a live capture of the real production delivery mechanism) OR the captured entry itself marks the point[unclear in source]or otherwise documents it as unconfirmed. WHEN both hold, you MUST NOT implement against the assumed shape until either a live capture (a real request/response from the actual mechanism, e.g. via a webhook capture endpoint, a sandbox call with real credentials, or a vendor support confirmation) replaces the inference, OR the assumption and its accepted risk are recorded as an explicit, named entry viadecision-interviewrather than silently built into the code. This closes the gap the 2026-07-15 tms-webhook-integration dogfood exposed: a captured reference existed and was cited, but it was evidenced only by the vendor's demo payload, and the auth-format point was already marked unconfirmed in the same reference set, yet implementation proceeded and shipped a code path that could never authenticate a real request.
Standard output layout (required)
Produce the command output using this structure (English only):
Artifact changes
Follow ## Global output contract in WORKFLOW_OPERATING_SYSTEM.md for APPLIED / PROPOSED / SKIP rules.
Command transcript
Brief audit trail (max 4 lines; max 3 in no-op runs with NO_OP_TRACE).
Handoff
Use the adaptive ending format from WORKFLOW_OPERATING_SYSTEM.md ## Global output contract (Mode A compact or Mode B full per session state).
Definition of done (command output)
- Every micro-delta bullet is addressed or explicitly deferred with evidence.
- Changes remain inside
DECISIONS.mdand the anchor slice intent; spills route outward instead of silent scope growth. - Slice complement notes are
PROPOSEDunless persisting in Agent mode; product edits follow repo reality. - Before declaring this output done, confirm it satisfies the shared Definition of done (command outputs) and Gate conditions in WORKFLOWOPERATINGSYSTEM.md.
Quality bar: Optimize for continuity: small, reviewable deltas with a clear audit trail back to the slice they complement.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Mozurok
- Source: Mozurok/fhorja.dev
- License: MIT
- Homepage: https://fhorja.dev
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.