Install
$ agentstack add skill-works-on-your-machine-womm-skills-golden-spec-create ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Golden Spec Create
Structure a new golden spec from a conversation, debug session, or manual input. Golden specs capture hard-won knowledge — what worked, what didn't, and the gotchas — so you don't have to figure things out twice.
Before Starting
- Check golden specs access. Try to list files in
~/.womm-skills/golden-specs/. If not accessible, tell the user:
- Add
~/.womm-skills/to allowed paths in~/.claude/settings.json - Add a reference in
~/.claude/CLAUDE.md:
`` Reference golden specs at ~/.womm-skills/golden-specs/ for battle-tested patterns and gotchas. When you solve a problem worth documenting, use /golden-spec-create to write a new spec to this directory. ``
- Read existing golden specs in
~/.womm-skills/golden-specs/to match format and depth. If no golden specs exist yet, use the template inreferences/golden-spec-template.md.
Process
1. Understand What Was Solved
Ask the user what they solved, or read from the conversation context. Get the full picture: what they were trying to do, what went wrong, and what finally worked.
2. Draft Each Section
For each section in the golden spec format, draft based on what you know and ask for clarification where needed:
- Problem — What were you trying to do? What made it hard?
- Why This Approach — What alternatives exist? Why is this one better? Include a comparison table or brief pros/cons if relevant.
- Architecture — How the pieces fit together. Diagram or description of the flow.
- Implementation — Complete, copy-paste-ready code and configuration. Not abbreviated. Include file paths.
- Common Gotchas — Things that went wrong or were surprising. Each one should include: what happens, why it happens, how to fix it.
- Cost / Tradeoffs — Monthly costs, performance tradeoffs, maintenance burden. Numbers where possible.
- Reference Implementations — Links or paths to working projects that use this pattern.
3. Focus on Gotchas
The gotchas section is the most valuable part. Push for specifics:
- Not "be careful with configuration" but "setting
pool_sizebelow 5 causes connection timeouts under load because Sidekiq defaults to 5 threads" - Not "testing can be tricky" but "Stripe webhook tests need
OpenSSL::HMAC.hexdigestto generate valid signatures — the Stripe gem's test helpers don't work in controller tests"
4. Make Implementation Complete
Code should be copy-paste-ready:
- Include full file paths
- Don't abbreviate with
...or "add your config here" - Show complete files when the context matters, not just the changed lines
- Include environment variables, configuration files, and migration files
5. Strip Project-Specific Details
Golden specs should be generic and reusable across any project. Before finalizing:
- Replace real project names, domains, and URLs with placeholders (
myapp,example.com) - Replace real S3 bucket names, database names, and secret IDs with
{project}-{environment}-{resource}patterns - Remove references to specific local paths (
~/Development/...) — use generic descriptions instead - Replace real API keys, account IDs, and org-specific values with placeholder formats
- Keep specific version numbers, gem names, and AWS instance sizes — those are the useful parts
The goal: someone with a completely different project should be able to follow the spec by substituting their own names.
6. Review
Present the draft for review. Check:
- Could someone follow this without any other context?
- Are the gotchas specific (not generic warnings)?
- Is the code complete (not placeholder)?
- Are costs actual numbers, not "it depends"?
- Are project-specific identifiers replaced with generic placeholders?
7. Write
Save to ~/.womm-skills/golden-specs/. Available in every project immediately.
Naming
SCREAMING_SNAKE_CASE.md matching the topic:
RAILS_AWS_TERRAFORM_CONFIGURATION.mdNEXTJS_VERCEL_DEPLOY.mdSTRIPE_SUBSCRIPTION_BILLING.mdPOSTGRES_FULL_TEXT_SEARCH.md
Cross-References
- If the user describes a problem they haven't solved yet: suggest
/design-doc - If the user wants to scan a conversation for multiple learnings: suggest
/problem-extractor(when available)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: works-on-your-machine
- Source: works-on-your-machine/womm-skills
- License: MIT
- Homepage: https://skills.worksonmymachine.ai
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.