Install
$ agentstack add skill-olgaiv39-claude-oss-skills-implement-minimal ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
implement-minimal
Central rule:
> Implement the smallest complete change that satisfies the current > acceptance criteria, and leave the project runnable.
Do not expand scope, add speculative structure, or refactor unrelated code while using this skill.
Activate when
- A plan or a single clear acceptance criterion exists and code must change
- The next step is one runnable increment
- The change is larger than a one-line edit but smaller than a full feature
Do not activate when
- No plan or acceptance criterion exists yet -> use
oss-plan - The repository does not exist yet -> use
oss-bootstrap - A test or build is failing and the cause is unknown -> use
test-and-debug - The change only adds or upgrades a dependency -> use
dependency-review
Required inputs
- The acceptance criterion for this increment
- Access to the repository to inspect status, conventions, and diff
- The targeted validation command for the affected code
Low-resource policy
Read the first of these that exists, then follow it:
${CLAUDE_PROJECT_DIR}/.claude/shared/LOW_RESOURCE.md$HOME/.claude/shared/LOW_RESOURCE.md
If neither exists, apply this fallback: run one expensive command at a time, prefer the narrowest validation, disable watch mode, reuse existing environments, and run full validation only at a milestone boundary. Do not scan the whole filesystem to locate the policy.
Context-efficiency policy
Read the first of these that exists, then follow it:
${CLAUDE_PROJECT_DIR}/.claude/shared/CONTEXT_EFFICIENCY.md$HOME/.claude/shared/CONTEXT_EFFICIENCY.md
If neither exists, apply this fallback: select files before reading; use targeted searches and bounded ranges; do not preload references; do not reread unchanged files; finish one atomic increment and stop; create a compact handoff before context is exhausted.
Facts that must not be assumed
- The test runner, package manager, or build tool
- That existing tests pass right now
- That an external API, wallet, or MCP tool is reachable
- That a dependency is already approved
Preflight
git status --shortandgit diff --statto see current work in progress- If unrelated uncommitted changes exist, stop and report before editing
- Identify the affected files and the convention they already follow ->
[references/change-types.md](references/change-types.md)
- Identify any external input the change reads ->
[references/external-boundaries.md](references/external-boundaries.md)
Workflow
- Restate the single acceptance criterion this increment satisfies
- Inspect
git statusandgit difffor in-progress work - Discover conventions from neighboring files and existing scripts
- Identify the one runnable increment that satisfies the criterion
- Before editing, state files to modify, files to create, any new dependency,
and the targeted validation command
- If a new dependency is required, stop and route to
dependency-review - Implement only that increment, following existing conventions
- Validate external input at the boundary once ->
[references/external-boundaries.md](references/external-boundaries.md)
- Run the targeted validation for the changed code only
- If validation fails, repair only failures caused by this increment; an
unrelated pre-existing failure is a stop-and-report condition
- Inspect
git diffand remove churn, stray edits, and obvious comments - Update docs only when public behavior changed
- Produce the report using
[templates/implementation-report.md](templates/implementation-report.md)
- Stop after the increment
Implementation rules
- Do not change unrelated files
- Do not silently rewrite entire modules
- Do not introduce an interface for a single implementation
- Do not introduce factories, repositories, providers, adapters, managers,
registries, or service layers without a demonstrated current need
- Do not extract a helper used only once unless it materially improves clarity
- Do not create generic utilities for possible future use
- Do not add fallback behavior not required by the acceptance criterion
- Do not add defensive branches for impossible or unsupported states
- Do not add architecture for anticipated future requirements
- Prefer existing project conventions over introducing new ones
- Validate external data at system boundaries, not at every internal call
- Avoid unrelated formatting churn and broad renaming
- Preserve public APIs unless the task explicitly changes them
- Do not claim validation that was not run
Comment policy
- Comments may explain a non-obvious constraint, trade-off, external behavior,
security decision, or mathematical assumption
- Comments must not narrate the next line, a function name, a loop, a
condition, an assignment, or obvious control flow
- Prefer clear names and small functions over explanatory comments
- Remove a stale comment only in code you directly modify, and only when safe
Change-type branches
Route by the kind of change; each branch names its own discovery, implementation boundary, validation, and stop condition -> [references/change-types.md](references/change-types.md)
- New feature slice
- Bug fix
- Integration with an external system
- Refactoring in isolation
- UI change
- CLI change
- Configuration change
- Documentation-affecting behavior change
Validation escalation
Run the smallest check that proves the increment:
single test or command
related test file
changed-file lint or typecheck
related integration path
full suite only at the milestone that ends the work
Never run the full suite after every edit.
Stop conditions
- The increment cannot be validated cheaply
- A pre-existing unrelated failure blocks the targeted validation
- The change requires a new dependency not yet reviewed
- The acceptance criterion is ambiguous after one clarification pass
Human review boundaries
- Any change to auth, wallet, or user-data handling
- Any change to a public API surface
- Any validation that could only be run against an unavailable live system
Final report
Produce the report in the exact section order of [templates/implementation-report.md](templates/implementation-report.md), then stop. Broader review happens under public-code-review.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: olgaiv39
- Source: olgaiv39/claude-oss-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.