Install
$ agentstack add skill-tomzx-agents-create-implementation ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Create Implementation
Implements a feature or task following its specification, plan, and task decomposition. Produces working code that passes tests and meets all acceptance criteria.
Prerequisites
- Apply the shared SDLC conventions in
skills/sdlc/references/shared.md. - If no argument is provided, locate the feature directory under
.sdlc/features/whose frontmatterissuefield references$ISSUE_NUMBER. - A task description, specification, or plan provided in context or as
$1 .sdlc/features/N-/telemetry.md(optional, if a telemetry plan was produced): implement analytics events and telemetry alongside feature code.sdlc/features/N-/observability.md(optional, if an observability plan was produced): implement logging, metrics, tracing, and health checks alongside feature code- Access to the codebase for reading and editing
- Test suite available (or created alongside the implementation)
Workflow
Read spec / task
|
v
Create or reuse feature branch
|
v
Understand codebase context
(patterns, conventions, architecture)
|
v
Implement in small, verifiable steps
|
v
Run tests after each step
|
v
All acceptance criteria met?
/ \
Yes No
| |
v v
Done Fix gaps
Steps
- Read the task, specification, acceptance criteria, telemetry plan, and observability plan (if present).
- Set the task frontmatter
status: in-progressin the corresponding.sdlc/features/N-/tasks/N-.mdfile. - Update the Task Progress table in
progress.mdto reflect the in-progress status. - Set up a feature branch (see Branching Strategy below).
- Explore the codebase to understand existing patterns, naming conventions, and architecture.
- Identify which files need to be created or modified.
- Implement the changes in small increments, verifying each step with tests.
- If a telemetry plan exists, implement analytics events and telemetry as part of each relevant code change.
- If an observability plan exists, implement logging, metrics, tracing, and health checks as part of each relevant code change.
- Ensure all acceptance criteria are met.
- Check for code quality issues (naming, duplication, dead code).
- Run the full test suite and confirm it passes.
Branching Strategy
The implementation must happen on a dedicated branch, never directly on main.
Branch creation
- Start from an up-to-date
main:
`` git checkout main git pull ``
- Create a feature branch using the convention
feat/-:
`` git checkout -b feat/42-add-order-endpoint ` If a plan branch already exists (e.g., plan/42 from publish-plan), create the feature branch from main`, not from the plan branch. The plan PR is for review only and will be closed separately.
Commit discipline
- Make small, atomic commits with descriptive messages.
- Reference the issue number in at least the first commit (e.g.,
feat: add POST /orders endpoint (#42)). - Rebase on
mainbefore pushing if the branch has been alive for a while:
`` git fetch origin git rebase origin/main ``
If a branch already exists
If you are resuming work on an existing feature branch, check it out and ensure it is up to date:
git checkout feat/42-add-order-endpoint
git pull
git rebase origin/main
Implementation Guidelines
- Follow the existing code style and naming conventions in the codebase.
- Write the minimum code needed to meet the acceptance criteria — no speculative features.
- Add comments only where the WHY is non-obvious.
- Handle error cases at system boundaries; trust internal code and framework guarantees.
- Do not introduce new dependencies unless specified in the plan.
- Ensure new code is covered by the tests defined in the test plan.
- Design public contracts and persisted data for evolution: tolerate unknown fields, handle unknown enum values gracefully, and prefer additive changes so future versions stay forward compatible.
Checklist Before Marking Done
- [ ] Working on a feature branch (not
main) - [ ] All acceptance criteria satisfied
- [ ] Analytics events implemented per telemetry plan (if present)
- [ ] Logging, metrics, tracing, and health checks implemented per observability plan (if present)
- [ ] Tests written and passing
- [ ] No linting or type errors
- [ ] No dead code or commented-out code introduced
- [ ] Public contracts and persisted data tolerate future additions (forward compatible)
- [ ] Existing tests still pass (no regressions)
- [ ] Branch rebased on latest
main - [ ] Task frontmatter updated:
status: done,completed_date: - [ ]
progress.mdTask Progress table updated - [ ] Self-check the change against the [
review-implementationchecklist](../review-implementation/SKILL.md) and fix what you can before requesting review
Handling Blockers
If a task cannot be completed due to an external dependency, missing information, or infrastructure issue:
- Set the task frontmatter
status: blockedand fill inblockerwith a brief description. - Update the Task Progress table in
progress.mdand the Current Blocker section. - Record the blocker as an assumption via
/create-assumptionif it carries meaningful risk. - Move to the next task if it has no dependency on the blocked task.
- If all remaining tasks depend on the blocked task, stop and write a session end marker to
progress.md.
When a blocker is resolved:
- Set the task frontmatter
status: in-progressandblocker: null. - Update
progress.mdaccordingly. - Continue implementation.
Outcome
If $OUTCOME_YAML is set, emit verdict: approved there per skills/sdlc/references/shared.md once the implementation impl/ PR is opened. If no PR was opened (e.g. blocked), omit the file.
Example Usage
Scenario 1: API endpoint task Task T-03: "Implement POST /orders endpoint per spec." Read spec for request/response schema, find existing endpoint patterns, create route + handler + validation + service layer, write integration test, confirm all test cases pass.
Scenario 2: Bug fix task Task describes a null pointer in the login flow. Locate the defect, implement the fix, write a regression test that would have caught the bug.
Next Step
Run /review-implementation to audit correctness, quality, security, and spec alignment before moving on. Once findings are resolved, continue with /create-documentation, then /validate-implementation to capture visual proof and get user sign-off before opening a PR, then /create-pr.
Useful Commands Reference
Use the tools available in the current session to read files, run tests, and edit code.
| Action | Common commands | |---|---| | Run tests | pytest, npm test, go test ./... | | Type check | mypy, tsc, pyright | | Lint | ruff check, eslint | | Format | ruff format, prettier |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: tomzx
- Source: tomzx/agents
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.