AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Product Traceability

skill-vmysla-agent-skill-product-traceability-product-traceability · by vmysla

Always-active skill that keeps PRDs, changelogs, decision records, and traceability matrices in sync with every AI-assisted change. Update requirements.md (living PRD), change.log (append-only history), decisions.md (rationale), and traceability-matrix.md (requirement ↔ artifact map) after every task that modifies code, configuration, or project structure.

No reviews yet
0 installs
8 views
0.0% view→install

Install

$ agentstack add skill-vmysla-agent-skill-product-traceability-product-traceability

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-vmysla-agent-skill-product-traceability-product-traceability)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Product Traceability? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Product Traceability

You MUST keep the following files in the project root synchronized with the current state of the project. Update them at the end of every task that modifies code, configuration, or project structure. If a file does not exist, create it.

Files to maintain

1. requirements.md — Living PRD (single source of truth)

Reflects the current, complete state of the application — not a history.

Required sections:

  • Overview — one-paragraph summary of what the app is and does
  • Features — all user-facing features and behaviors, each with status

(Implemented / Planned / Deprecated), originating session date, and artifacts (file paths)

  • Configuration — settings, environment variables, defaults, options
  • Dependencies — key libraries, services, external systems
  • Architecture — how components are organized and interact
  • Constraints — known limitations, invariants, requirements

When a feature is added, add it. When removed, remove it. When behavior changes, update the description. This file always answers: "What does this application do right now?"

2. change.log — Append-only history

Record every change with date and a short description of what + why. Newest entries at the top. Group same-day entries under one date heading.

Use Keep a Changelog style under [Unreleased] for grouping by type:

## [Unreleased]

### Added
- Real-time notifications via WebSockets.

### Updated
- Revised notification settings in the PRD.

### Removed
- Legacy polling endpoint.

## 2026-04-21

- Added real-time notifications: WebSocket channel for in-app delivery.
- Updated PRD notification config to cover retry + backoff.

When cutting a release, promote [Unreleased] to a dated + versioned heading (e.g. ## [1.4.0] — 2026-04-21).

3. decisions.md — Decision records with rationale

Append a new record whenever a non-obvious architectural or product decision is made. Format:

## YYYY-MM-DD — Short decision title

**Context:** why this came up
**Decision:** what was chosen
**Rationale:** why it was chosen over alternatives
**Consequences:** tradeoffs, follow-ups, new constraints
**Related:** requirements.md §Section, change.log entry, PR link

4. traceability-matrix.md — Requirement ↔ artifact mapping

Table linking every tracked requirement back to the prompt that produced it, the implementation artifacts, the decision record, the changelog entry, and the verification (tests / review).

| Requirement | Prompt excerpt | Implementation | Decision | Changelog | Verification | |-------------|----------------|----------------|----------|-----------|--------------| | Real-Time Notifications | "Add real-time notifications using WebSockets." | notifications_service.ts | 2026-04-21 | 2026-04-21 Added | tests/notifications.test.ts |

Update the row when a requirement ships, is deprecated, or moves files.

Rules

  • Update all relevant files after every code / config / structure change.
  • If requirements.md is already accurate, verify it; no edit needed.
  • If a file does not yet exist, create it (use the templates shipped with

this skill under ~/.claude/skills/product-traceability/templates/).

  • Do not skip this step. A Stop hook will remind you.
  • Never rewrite historical change.log or decisions.md entries — append

corrections as new entries instead.

  • Prefer concise, specific language. Name the features, files, and

behaviors that changed.

  • When linking artifacts, use paths relative to the project root.

Inputs you can draw on

  • The user's prompts in this session
  • The diffs you produced (Edit / Write tool calls)
  • Tool outputs and command results
  • Existing requirements.md, change.log, decisions.md,

traceability-matrix.md

  • git log, git diff, open PRs

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.