Install
$ agentstack add skill-xmu-csnoob-praxiskit-batch-to-build ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Batch to Build
Execute one authorized batch. Scheduling belongs to task-graph-to-batch; this skill implements, validates, closes bookkeeping, and stops before acceptance.
work/execution-batch-{n}.md -> batch-to-build -> code + work/build-log-{n}.md + task statuses
Build log template: templates/build-log.md.
Contract
Inputs: work/execution-batch-{n}.md with Mode: execute (carried from task-graph-to-batch), OR dry-run plus fresh scoped authorization Output: modified source, work/build-log-{n}.md, updated task statuses in work/task-graph.md, updated work/praxiskit-context.md Preconditions: batch exists; baseline pass (unless valid baseline-repair batch); authorization scoped to this batch Stop boundary: Does not make acceptance decisions or extend scope. Hand off to review-and-accept.
Must Rules
- Authorization is required in the current session by host-native decision or direct chat confirmation scoped to this batch.
baseline.status = failedorbaseline.status = unavailableis not executable unless the batch explicitly saysBaseline mode: fresh-startor this is a baseline-repair batch. Route other cases back totask-graph-to-batch.- Any 2+ task parallel group is
subagent-driven. The orchestrator must not implement those tasks directly. - Spawn all subagents for a parallel group before doing implementation work for that group.
- Single-task sequential groups default to orchestrator implementation. Dispatch a worker only when the task is large, risky, explicitly requested, or the batch says a worker is required.
- Workers may modify only assigned write scopes and must not update PraxisKit bookkeeping files.
- The orchestrator owns
work/task-graph.md,work/execution-batch-*.md,work/build-log-*.md,work/praxiskit-context.md,work/review.md, andwork/acceptance.md. - After all subagents in a group complete, the orchestrator continues automatically through reconcile, review, validation, final task status updates, build log, and closeout.
Authorization
- Read the batch authorization block.
- If
Mode: executeis already set (carried fromtask-graph-to-batch), proceed directly to upgrade checks (step 5) — skip the user prompt. Re-prompt only if a check fails.
If dry-run and no current-turn authorization exists, ask once with host-native input if available:
- question: "Execute this batch now?"
- options:
execute_now,keep_dry_run - include batch path, task IDs, parallel groups, subagent dispatch expectation, and validation commands
- If still not authorized, refuse:
``text Cannot execute: batch is dry-run only. Execution requires a yes/no decision for this exact batch. ``
- Never instruct the user to type specific command phrases. Use a host-native decision prompt or one direct yes/no chat question.
- Upgrade checks (run whenever batch.Mode = execute, whether carried or freshly authorized):
- task graph fingerprint unchanged, or selected task rows still match exactly
- selected tasks are still
[ ]and unblocked - baseline rechecked and executable
- If checks pass, confirm authorization fields:
Mode: execute,Approved by user: yes,Authorization source: decision-ui | chat-confirmation, current timestamp. - If any parallel group has 2+ tasks and the batch does not say
subagent-driven, treat that as a contract defect and update/refuse before execution.
Context Budget
- Treat the execution batch as the canonical input.
- Read
work/task-graph.mdat most once during authorization/upgrade checks; use targeted lookup for statuses. - Do not read PRD, idea, or prior logs unless the batch lacks required execution detail.
- Do not paste full source, task graph, PRD, or logs into subagent prompts.
- Update
work/task-graph.mdin at most two grouped edits: mark selected tasks[/], then final[x]/[!]. - Keep logs concise: file lists, summaries, validation, risks. No full source dumps.
- Keep worker prompts and worker final reports terse. The required
RESULT:line is enough unless a blocker or risk needs one extra sentence. - For large builds, start the next batch in a fresh session with only
work/praxiskit-context.md, the next batch, andwork/SUBAGENT.md.
Workflow
- Authorize as above.
- Re-run baseline. If it fails and this is not a baseline-repair batch, refuse and route to re-batching.
- Mark all selected tasks
[/]in one grouped edit. - Execute groups in dependency order:
- For each 2+ task parallel group, dispatch one subagent per task before integrating results.
- In Claude Code, use
Task; in Codex or other hosts, use the platform subagent/delegation tool. - If a parallel group requires subagents and no subagent tool exists, stop and report the blocker.
- Single-task sequential groups should be implemented by the orchestrator unless dispatch is justified by the batch or task risk.
- Subagent prompt must include only:
work/SUBAGENT.md- current execution batch path
- exact task row and acceptance criteria
- dependencies already complete
- owned write scope
- "you are not alone; do not revert others; do not edit PraxisKit bookkeeping"
- report format:
RESULT: {T_ID} | files: [...] | summary: ... | validation: ...
- After the last subagent in a group completes, reconcile automatically:
- collect every
RESULT - inspect changed files and scope compliance with targeted diffs
- record blockers and any scope violations
- Run validation once after group integration unless a worker reported a blocking failure.
- Mark final task statuses
[x]/[!]in one grouped edit. Subagent completion notifications alone do not close tasks. - Write
work/build-log-{n}.mdfromtemplates/build-log.md. - Refresh
work/praxiskit-context.md. - Run closeout and present the continuation prompt below when the user is present.
Closeout
Before stopping:
- Confirm every selected task is
[x]or[!]. - Classify leftovers as
next_batch,blocked,deferred, orcleanup. - Update only docs touched by the batch or required to explain current state.
- Archive transient scratch/clarify notes under
work/archive/only after summarizing relevant content in the build log. - In
work/praxiskit-context.md, record last batch, validation result, blockers, recommended next skill, and exact fresh-session artifacts. - If unblocked tasks remain, use host-native decision input as a discuss-style continuation prompt:
- question: "What should PraxisKit do next?"
- options:
create_next_batch: runtask-graph-to-batchnow; this is planning only and will show a separate execution authorization promptreview_current_build: runreview-and-acceptnowstop_here: stop with the resume artifacts- If host-native input is unavailable, ask one direct chat question listing those three options.
- Never interpret silence or a vague "continue" as execution authorization. Choosing
create_next_batchauthorizes only planning the next batch;batch-to-buildstill requires its own scoped execution authorization.
Formal accept/revise/continue decisions belong to review-and-accept Phase 2.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: xmu-csnoob
- Source: xmu-csnoob/PraxisKit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.