Individual skill
senior-engineering-partner
A strict code reviewer, pair programmer, debugger, and mentor for Python, Bash, Google Apps Script, JavaScript, and Swift/Apple platforms. Use when writing, reviewing, debugging, planning, or securing code, or for senior-level rigor, a security review, or mentoring. Mode triggers — REVIEW: (critique + refactor), EXPLAIN: (teach), MVP:/PROTOTYPE: (lean-but-safe), DEBUG: (root-cause), AUDIT: (report-first); default is pair-programming. Drives a spec→plan→TDD→verify loop with a deterministic-first, verify-before-asserting (anti-hallucination) discipline. Enforces a security floor (secrets, injection, input validation, isolation, least privilege, authn) and a backup/continuity floor on a phase-aware rigor ladder (Prototype→MVP→Production) — cheap ≠ insecure. Covers testing & fuzzing, SAST/secret-scan/type-check/supply-chain gates, multi-tenant data protection, resilience & DR, scalability, CI/CD, cloud/containers/DBs, and accessible UI — deep references read on demand.
SKILL.md
Source commit dc3e92227aee137ad48da8ccd9b0a44251ff7664
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 6, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 191
- Repository last updated
- Nov 8, 2026
- License
- Apache-2.0
Observed agent integration: claude-code
- ai-agents Repository topic
- anthropic Repository topic
- bash Repository topic
- claude-code Repository topic
- claude-code-skill Repository topic
- claude-skill Repository topic
- code-review Repository topic
- developer-tools Repository topic
- pair-programming Repository topic
- python Repository topic
- engineering Derived category
- testing Derived category
- security Derived category
- design Derived category
- writing Derived category
- data Derived category
- devops Derived category
- design-interface Derived category
- devops-containers Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
.claude-plugin/marketplace.jsonasset · 914 bytes.claude-plugin/plugin.jsonasset · 916 bytes.github/CODEOWNERSasset · 708 bytes.github/ISSUE_TEMPLATE/bug_report.ymlasset · 1,738 bytes.github/ISSUE_TEMPLATE/config.ymlasset · 521 bytes.github/dependabot.ymlasset · 381 bytes.github/pull_request_template.mddoc · 1,729 bytes.github/workflows/actions-lint.ymlasset · 1,232 bytes.github/workflows/citation-validate.ymlasset · 1,230 bytes.github/workflows/docs-render.ymlasset · 949 bytes.github/workflows/eval-guard.ymlasset · 1,199 bytes.github/workflows/leakage-guard.ymlasset · 699 bytes.github/workflows/plugin-validate.ymlasset · 1,462 bytes.github/workflows/release-please.ymlasset · 1,790 bytes.github/workflows/scorecard.ymlasset · 1,801 bytes.github/workflows/script-tests.ymlasset · 1,183 bytes.github/workflows/shellcheck.ymlasset · 1,410 bytes.github/workflows/skill-lint.ymlasset · 1,025 bytes.gitignoreasset · 518 bytes.release-please-manifest.jsonasset · 20 bytesCHANGELOG.mddoc · 104,791 bytesCITATION.cffasset · 1,525 bytesCLAUDE.mddoc · 4,451 bytesCODE_OF_CONDUCT.mddoc · 5,493 bytesCONTRIBUTING.mddoc · 9,929 bytesLICENSEasset · 11,358 bytesMAINTAINERS.mddoc · 10,172 bytesNOTICEasset · 563 bytesPRIVACY.mddoc · 1,919 bytesREADME.mddoc · 33,739 bytesSECURITY.mddoc · 1,482 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesSKILL.mdcore · 92,234 bytesdocs/adr/0001-core-density-over-token-cost.mddoc · 3,317 bytesevals/README.mddoc · 21,111 bytesevals/baselines/2026-07-01-opus/BASELINE.mddoc · 3,471 bytesevals/baselines/2026-07-01-opus/baseline.jsonasset · 74,596 bytesevals/baselines/2026-07-01-opus/with-skill.jsonasset · 74,917 bytesevals/baselines/2026-07-02-opus/BASELINE.mddoc · 5,074 bytesevals/baselines/2026-07-02-opus/baseline.jsonasset · 98,774 bytesevals/baselines/2026-07-02-opus/with-skill.jsonasset · 96,954 bytesevals/baselines/2026-07-04-fable/BASELINE.mddoc · 5,167 bytesevals/baselines/2026-07-04-fable/baseline.jsonasset · 126,068 bytesevals/baselines/2026-07-04-fable/with-skill.jsonasset · 123,932 bytesevals/baselines/2026-07-04-haiku/BASELINE.mddoc · 4,924 bytesevals/baselines/2026-07-04-haiku/baseline.jsonasset · 119,848 bytesevals/baselines/2026-07-04-haiku/with-skill.jsonasset · 122,171 bytesevals/baselines/2026-07-04-post-t4/BASELINE.mddoc · 4,109 bytesevals/baselines/2026-07-04-post-t4/with-skill-fable.jsonasset · 125,374 bytesevals/baselines/2026-07-04-post-t4/with-skill-haiku.jsonasset · 122,961 bytesevals/baselines/2026-07-04-post-t4/with-skill-sonnet.jsonasset · 122,749 bytesevals/baselines/2026-07-04-sonnet/BASELINE.mddoc · 4,220 bytesevals/baselines/2026-07-04-sonnet/baseline.jsonasset · 121,614 bytesevals/baselines/2026-07-04-sonnet/with-skill.jsonasset · 124,375 bytesevals/baselines/2026-07-05-opus/BASELINE.mddoc · 5,988 bytesevals/baselines/2026-07-05-opus/baseline.jsonasset · 127,965 bytesevals/baselines/2026-07-05-opus/with-skill.jsonasset · 123,508 bytesevals/baselines/2026-07-27-haiku/BASELINE.mddoc · 1,437 bytesevals/baselines/2026-07-27-haiku/baseline.jsonasset · 188,136 bytesevals/baselines/2026-07-27-haiku/with-skill.jsonasset · 192,302 bytesevals/baselines/2026-07-27-opus/BASELINE.mddoc · 2,683 bytesevals/baselines/2026-07-27-opus/baseline.jsonasset · 203,066 bytesevals/baselines/2026-07-27-opus/with-skill.jsonasset · 201,935 bytesevals/baselines/2026-07-27-postdiet-experiment/EXPERIMENT.mddoc · 3,047 bytesevals/baselines/2026-07-27-postdiet-experiment/haiku-with-skill.jsonasset · 191,704 bytesevals/baselines/2026-07-27-postdiet-experiment/opus-with-skill.jsonasset · 200,610 bytesevals/baselines/2026-07-28-fable/BASELINE.mddoc · 1,566 bytesevals/baselines/2026-07-28-fable/baseline.jsonasset · 202,102 bytesevals/baselines/2026-07-28-fable/with-skill.jsonasset · 193,903 bytesevals/baselines/2026-08-10-fable/BASELINE.mddoc · 7,141 bytesevals/baselines/2026-08-10-fable/with-skill.jsonasset · 243,425 bytesevals/baselines/2026-09-14-fable/BASELINE.mddoc · 3,369 bytesevals/baselines/2026-09-14-fable/with-skill.jsonasset · 232,749 bytesevals/baselines/2026-10-29-fable/BASELINE.mddoc · 6,020 bytesevals/baselines/2026-10-29-fable/with-skill.jsonasset · 240,144 bytesevals/fixtures/dependency-manifest-drift/.github/workflows/ci.yml.fixtureasset · 417 bytesevals/fixtures/dependency-manifest-drift/Dockerfile.fixtureasset · 176 bytesevals/fixtures/dependency-manifest-drift/pyproject.toml.fixtureasset · 229 bytesevals/fixtures/dependency-manifest-drift/requirements-server.txt.fixtureasset · 75 bytesevals/fixtures/dependency-manifest-drift/scripts/audit.sh.fixtureruns · 176 bytesevals/fixtures/stale-diagram-on-behavior-change/.github/workflows/docs-render.yml.fixtureasset · 368 bytesevals/fixtures/stale-diagram-on-behavior-change/CHANGELOG.md.fixtureasset · 258 bytesevals/fixtures/stale-diagram-on-behavior-change/README.md.fixtureasset · 433 bytesevals/fixtures/stale-diagram-on-behavior-change/sync.py.fixtureasset · 698 bytesevals/fixtures/tdd-regression-red-first/billing/__init__.py.fixtureasset · 0 bytesevals/fixtures/tdd-regression-red-first/billing/truncate.py.fixtureasset · 483 bytesevals/fixtures/tdd-regression-red-first/tests/__init__.py.fixtureasset · 0 bytesevals/fixtures/tdd-regression-red-first/tests/test_truncate.py.fixtureasset · 469 bytesevals/scenarios/absence-is-not-evidence.jsonasset · 1,410 bytesevals/scenarios/adr-must-name-overridden-discipline.jsonasset · 1,380 bytesevals/scenarios/adversarial-review-green-but-insufficient.jsonasset · 2,736 bytesevals/scenarios/agent-uses-automation-credential-interactively.jsonasset · 2,211 bytesevals/scenarios/agentic-human-in-loop-resolved-call.jsonasset · 2,055 bytesevals/scenarios/agentic-least-agency-tool-args.jsonasset · 2,339 bytesevals/scenarios/agentic-mcp-server-review.jsonasset · 2,634 bytesevals/scenarios/apps-script-least-privilege-scope.jsonasset · 1,577 bytesevals/scenarios/badge-row-required-on-repo.jsonasset · 1,268 bytesevals/scenarios/badge-verify-claimed-level-not-just-200.jsonasset · 1,669 bytesevals/scenarios/bash-injection-eval.jsonasset · 814 bytesevals/scenarios/bash-strict-mode-pitfalls.jsonasset · 2,504 bytesevals/scenarios/citation-cff-no-hand-maintained-version.jsonasset · 1,489 bytesevals/scenarios/crypto-agility-pqc-hndl.jsonasset · 2,697 bytesevals/scenarios/csv-formula-injection-export.jsonasset · 1,184 bytesevals/scenarios/debug-false-negative-search.jsonasset · 1,447 bytesevals/scenarios/debug-root-cause-not-symptom.jsonasset · 993 bytesevals/scenarios/degrade-dont-crash-on-dependency-failure.jsonasset · 1,293 bytesevals/scenarios/dependabot-lockstep-pair.jsonasset · 1,595 bytesevals/scenarios/dependency-currency-not-just-pinned.jsonasset · 1,794 bytesevals/scenarios/dependency-manifest-drift.jsonasset · 1,052 bytesevals/scenarios/dependency-rescan-daily-with-sla.jsonasset · 3,051 bytesevals/scenarios/environment-binding-not-mandate.jsonasset · 1,542 bytesevals/scenarios/fail-closed-not-degraded-success.jsonasset · 1,187 bytesevals/scenarios/fda-compiled-launcher.jsonasset · 1,362 bytesevals/scenarios/frontend-testing-behavior-not-implementation.jsonasset · 2,608 bytesevals/scenarios/frozen-resolver-cutoff.jsonasset · 1,923 bytesevals/scenarios/gate-promotion-ladder.jsonasset · 1,602 bytesevals/scenarios/gha-expression-injection.jsonasset · 1,464 bytesevals/scenarios/graceful-shutdown-sigterm.jsonasset · 1,369 bytesevals/scenarios/honest-badges-only.jsonasset · 1,291 bytesevals/scenarios/host-os-binding-logs-and-least-privilege.jsonasset · 1,800 bytesevals/scenarios/immutable-backup-not-just-versioning.jsonasset · 1,538 bytesevals/scenarios/launchd-descriptive-executable-name.jsonasset · 1,607 bytesevals/scenarios/llm-loop-stopping-criteria.jsonasset · 2,177 bytesevals/scenarios/log-injection-sanitize.jsonasset · 1,301 bytesevals/scenarios/log-read-before-declaring-healthy.jsonasset · 3,332 bytesevals/scenarios/maintainability-gate-not-opinion.jsonasset · 1,557 bytesevals/scenarios/per-workload-credential-provisioning.jsonasset · 1,828 bytesevals/scenarios/preserve-input-on-failed-submit.jsonasset · 796 bytesevals/scenarios/prompt-injection-structural-fence.jsonasset · 2,397 bytesevals/scenarios/rag-vector-store-tenant-isolation.jsonasset · 2,477 bytesevals/scenarios/readme-toc-anchor-validation.jsonasset · 1,559 bytesevals/scenarios/restore-drill-required.jsonasset · 1,412 bytesevals/scenarios/rls-cross-tenant-deny.jsonasset · 951 bytesevals/scenarios/rls-superuser-parity-gate.jsonasset · 2,547 bytesevals/scenarios/runtime-image-no-installer.jsonasset · 1,603 bytesevals/scenarios/sbom-provenance-on-release.jsonasset · 1,489 bytesevals/scenarios/scalability-db-pool-ceiling.jsonasset · 1,429 bytesevals/scenarios/scm-triage-reviews-before-merge.jsonasset · 1,375 bytesevals/scenarios/secrets-never-hardcoded.jsonasset · 915 bytesevals/scenarios/self-improvement-consent-gated.jsonasset · 1,932 bytesevals/scenarios/single-file-vs-package-decision.jsonasset · 1,491 bytesevals/scenarios/spec-first-gate.jsonasset · 868 bytesevals/scenarios/squash-not-rebase-merge.jsonasset · 729 bytesevals/scenarios/stale-diagram-on-behavior-change.jsonasset · 1,369 bytesevals/scenarios/standards-authoring-timeless-enforceable.jsonasset · 1,593 bytesevals/scenarios/stateless-for-horizontal-scale.jsonasset · 1,337 bytesevals/scenarios/swift-cksyncengine-hard-rules.jsonasset · 2,800 bytesevals/scenarios/swift-security-floor-apple-bindings.jsonasset · 3,245 bytesevals/scenarios/swift-toolchain-supply-chain-gates.jsonasset · 2,806 bytesevals/scenarios/tdd-regression-red-first.jsonasset · 1,111 bytesevals/scenarios/three-state-appearance-control.jsonasset · 1,762 bytesevals/scenarios/typecheck-gate-required.jsonasset · 1,192 bytesevals/scenarios/typeddict-not-dict-any.jsonasset · 1,291 bytesevals/scenarios/whole-tree-gates-not-file-list.jsonasset · 2,200 bytesevals/scenarios/yagni-no-speculative-abstraction.jsonasset · 1,461 bytesreferences/action-identity-and-audit.mddoc · 10,476 bytesreferences/agentic-ai-security.mddoc · 13,479 bytesreferences/audit-report-format.mddoc · 5,151 bytesreferences/bash-scripting.mddoc · 10,652 bytesreferences/business-continuity.mddoc · 6,484 bytesreferences/caching.mddoc · 7,123 bytesreferences/compliance.mddoc · 34,345 bytesreferences/containers-and-orchestration.mddoc · 21,893 bytesreferences/data-protection.mddoc · 18,529 bytesreferences/databases.mddoc · 27,154 bytesreferences/debugging.mddoc · 14,081 bytesreferences/dev-environment-isolation.mddoc · 15,207 bytesreferences/dev-environments.mddoc · 17,536 bytesreferences/diagrams-and-visual-docs.mddoc · 16,911 bytesreferences/disaster-recovery.mddoc · 13,978 bytesreferences/engineering-workflow.mddoc · 18,258 bytesreferences/foss-adoption.mddoc · 10,498 bytesreferences/frontend-web-security.mddoc · 9,007 bytesreferences/gcp.mddoc · 25,254 bytesreferences/github-actions.mddoc · 19,683 bytesreferences/github-teams.mddoc · 16,211 bytesreferences/google-apps-script.mddoc · 14,552 bytesreferences/iac-terraform.mddoc · 19,545 bytesreferences/javascript-and-typescript.mddoc · 14,246 bytesreferences/leakage-denylist.local.templateasset · 2,505 bytesreferences/llm-apps.mddoc · 12,827 bytesreferences/local-and-agentic-ai-tools.mddoc · 17,245 bytesreferences/logging-and-monitoring.mddoc · 17,551 bytesreferences/macos-app-bundles.mddoc · 8,997 bytesreferences/maintainability-metrics.mddoc · 4,883 bytesreferences/multi-agent-coordination.mddoc · 8,112 bytesreferences/my-environment.template.mddoc · 4,845 bytesreferences/observability-and-incident-response.mddoc · 22,589 bytesreferences/package-managers.mddoc · 25,937 bytesreferences/python-typing-and-packaging.mddoc · 7,912 bytesreferences/python-web-apis.mddoc · 13,407 bytesreferences/resilience-engineering.mddoc · 10,981 bytesreferences/scalability-and-system-design.mddoc · 8,423 bytesreferences/secrets-and-key-rotation.mddoc · 11,066 bytesreferences/secure-data-processing.mddoc · 23,725 bytesreferences/skill-self-improvement.mddoc · 7,290 bytesreferences/standards-authoring.mddoc · 5,817 bytesreferences/swift-apple-development.mddoc · 28,513 bytesreferences/testing-single-file.mddoc · 1,714 bytesreferences/testing.mddoc · 27,509 bytesreferences/threat-modeling-and-api-design.mddoc · 14,292 bytesreferences/ui-design-and-accessibility.mddoc · 13,916 bytesrelease-please-config.jsonasset · 545 bytesscripts/actions-lint.shruns · 5,108 bytesscripts/audit.shruns · 2,354 bytesscripts/curate-baseline.pyruns · 4,123 bytesscripts/eval-guard.pyruns · 3,621 bytesscripts/leakage-guard.shruns · 6,457 bytesscripts/render-diagrams.shruns · 2,601 bytesscripts/run-evals.pyruns · 61,941 bytesscripts/self-review.mddoc · 3,499 bytesscripts/skill-lint.pyruns · 9,463 bytesscripts/tests/test-scripts.shruns · 39,992 bytesscripts/validate-citation.shruns · 2,208 bytes
Read excerpt
# ROLE AND CONTEXT
You are an elite Software Engineering Partner and Senior Developer across the whole arc — cheap throwaway prototype → MVP shipped to real users → production-grade commercial multi-tenant application — spanning internal tooling, automation pipelines, administrative systems, web/GUI front-ends, and data services. Do the heavy lifting: design, write, test, and maintain code. Calibrate explanations to the profile's experience level.
You specialize in Python, Google Apps Script, Bash, JavaScript, and Swift (Apple platforms).
## ENVIRONMENT PROFILE
The disciplines here are **stack-agnostic and portable** — the universal core. Your **concrete environment** (identity/MDM, secrets manager, hosts, repos, house Git standards, the reference app examples bind to) lives in **`references/my-environment.md`** — not shipped; copy [`references/my-environment.template.md`](references/my-environment.template.md) and fill it in — the one file you customize; everything else stays as-is.
**Read `references/my-environment.md` early** — at session start, and for any environment-specific claim (host, repo, service, deploy target, Git/SCM standards). Don't bake those specifics back into the core. If the file is absent, fall back to the assumed baseline below and proceed generically.
**Universal core vs. overridable bindings.** The disciplines — security floor, gates, workflow — never vary by environment; only the *binding* does. The assumed baseline covers any binding the profile doesn't set:
| Binding | Assumed baseline (shipped default) | Typical overrides |
|---|---|---|
| Host OS | **macOS** | any POSIX host; Windows (WSL for the shipped Bash examples, or native + a Shell override) |