Best for
- A new project has been scaffolded and the agents/settings/contexts/ files are still
- The user asks "help me fill in the auth model context", "set up tenant
- A reviewer skill (authz-review, data-flow-mapper, migration-safety,
event4u-app/agent-config/src/skills/context-authoring/SKILL.md
Use when filling knowledge-layer context files — auth-model, tenant-boundaries, data-sensitivity, deployment-order, observability — interactive template walkthrough.
Decision brief
Use when filling knowledge-layer context files — auth-model, tenant-boundaries, data-sensitivity, deployment-order, observability — interactive template walkthrough.
Compatibility matrix
| Platform | Status | Evidence | What to check |
|---|---|---|---|
| Codex | Not declared | No explicit evidence | Portability before use |
| Claude Code | Not declared | No explicit evidence | Portability before use |
| Cursor | Not declared | No explicit evidence | Portability before use |
| Gemini CLI | Not declared | No explicit evidence | Portability before use |
Installation
The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.
npx skills add https://github.com/event4u-app/agent-config --skill "src/skills/context-authoring"Inspect the Agent Skill "context-authoring" from https://github.com/event4u-app/agent-config/blob/0adf49a8ae84b0ff6e2de8759eea43257e020eff/src/skills/context-authoring/SKILL.md at commit 0adf49a8ae84b0ff6e2de8759eea43257e020eff. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.
Workflow
1. List agents/settings/contexts/ — which of the five files exist? Which still contain the HTML comment? 2. Ask the user which file to work on. Use numbered options:
1. List agents/settings/contexts/ — which of the five files exist? Which still contain the HTML comment? 2. Ask the user which file to work on. Use numbered options:
For the chosen file, pull what the codebase already reveals before asking the user. Record the file:line citations — they become the authoritative source when the user is unsure.
1. Open the template and treat every HTML comment as a question for the user. Do NOT fabricate answers to skip a section. 2. Present each section as:
1. Remove the top-of-file comment only after at least one section has been authored — an untouched file must stay recognisable as a stub. 2. Keep every heading the template ships with. Reviewer skills grep for exact section names ( Known exceptions, Known alerts, etc.). 3. Do NO…
Permission review
The documentation asks the agent to create, modify, or delete local files.
Remove the top-of-file `<!-- Template shipped by ... -->` comment onlyEvidence record
| Signal | Value | Evidence type | Meaning |
|---|---|---|---|
| Quality score | 91/100 | Computed | Documentation, specificity, maintenance, and trust rules |
| Repository stars | 7 | Source | Repository attention, not individual Skill quality |
| Compatibility | 0 platforms | Source | Declared in the catalog source record |
| Usage guide | automated source guide | Editorial | Generated or reviewed according to the visible evidence level |
Pinned source
Use this skill when:
agents/settings/contexts/ files are still
template stubs from event4u/agent-config.authz-review, data-flow-mapper, migration-safety,
multi-tenant-boundary-review, secrets-and-config-review) reports "I
cannot proceed — agents/settings/contexts/<file>.md is still a template".Do NOT use when:
agent-docs-writing.context-create.domain-invariants.yml, etc.)
— use /memory-add.| File | What it answers | Who reads it |
|---|---|---|
auth-model.md | Roles, permission model, impersonation, known exceptions | authz-review, judge-security-auditor, threat-modeling |
tenant-boundaries.md | Tenancy type, scope propagation, known cross-tenant paths | multi-tenant-boundary-review, blast-radius-analyzer, judge-security-auditor |
data-sensitivity.md | Field classification, masking rules, log-safe types | data-exposure-review, data-flow-mapper, logging reviewers |
deployment-order.md | Migration strategy, feature flags, rollback plan | migration-safety, judge-bug-hunter, release reviewers |
observability.md | Error tracking, log channels, metrics, known alerts | deploy reviewers, bug-analyzer, incident mode |
The templates ship in .agent-src.uncondensed/templates/contexts/ and are
copied into agents/settings/contexts/ by the installer.
List agents/settings/contexts/ — which of the five files exist? Which still contain
the <!-- Template shipped by event4u/agent-config. --> HTML comment?
Ask the user which file to work on. Use numbered options:
> 1. auth-model.md — roles, permissions, impersonation
> 2. tenant-boundaries.md — tenancy type and scope propagation
> 3. data-sensitivity.md — field classification and masking
> 4. deployment-order.md — migrations, flags, rollback
> 5. observability.md — errors, logs, metrics, alerts
If multiple files are stubs, default to the order above — auth-model is
the prerequisite for tenant-boundaries; both feed data-sensitivity.
For the chosen file, pull what the codebase already reveals before asking the user. Record the file:line citations — they become the authoritative source when the user is unsure.
| File | Harvest from |
|---|---|
auth-model.md | Policy classes, Gate definitions, permission seeders, role enums, @can directives, middleware |
tenant-boundaries.md | Base query scopes, connection-switching middleware, tenant-resolution service, global scopes, .env vars like TENANT_* |
data-sensitivity.md | ORM hidden-field config (Eloquent $hidden / $casts, Symfony #[Ignore], Prisma select defaults, SQLAlchemy __init__ filters), Sentry beforeSend, logging redaction helpers, API serialisers / resources, export commands |
deployment-order.md | database/migrations/, feature-flag config (Pennant / LaunchDarkly), deploy scripts, CI workflow, rollback runbooks in docs/ |
observability.md | config/logging.php, Sentry init, dashboard links in READMEs, alert rules in Terraform/Grafana dashboards |
Start the walkthrough by showing the harvested evidence — the user only has to confirm or correct, not invent from scratch.
Open the template and treat every HTML comment as a question for the user. Do NOT fabricate answers to skip a section.
Present each section as:
**Section:** <heading>
**Template asks:** <what the comment says>
**Evidence I found:** <file:line references or "none">
**Proposed content:** <draft or "I need your input">
> 1. Accept the draft
> 2. Edit — tell me what's wrong
> 3. I don't know — mark as "TBD" with a follow-up task
If the user picks "TBD", insert an HTML comment <!-- TBD: <question> -->
at that spot — never a fabricated value. Reviewer skills key on the
comment to warn about incomplete sections.
<!-- Template shipped by ... --> comment only
after at least one section has been authored — an untouched file must
stay recognisable as a stub.## Known exceptions, ## Known alerts, etc.).learning-to-rule-or-skill to expand the template upstream../scripts-run src/scripts/check_portability — project-specific content is
expected here, but the check catches accidental copy of other projects'
identifiers../scripts-run src/scripts/check_references — cross-file links between the
five contexts must resolve.<!-- TBD -->
marker stays.agents/settings/contexts/<file>.md updated with project-specific content; every
section either authored or explicitly marked <!-- TBD: ... -->.TBD, and which downstream reviewer skills are now unblocked.agents/learnings/ for any template gap
the user hit (missing section, ambiguous field) — feeds the curated
self-improvement pipeline via learning-to-rule-or-skill.<!-- TBD: ... --> marker is
always better than a made-up entry — reviewer skills trust this file.data-sensitivity.md is the highest-leverage file and also the one most
likely to be skipped as "boring". Prioritise it after auth-model —
missing entries here become production leaks, not review nits.tenant-boundaries.md SHOULD be deleted, not stubbed — the checklist
explicitly says so at the top of the file.If the context file declares its own load_context: (chain reasoning),
use logical names rooted at the source — contexts/<area>/<file>.md
for package material or agents/settings/contexts/<file>.md for project-local
material. The .agent-src.uncondensed/ prefix is rejected by the
schema regex and by scripts/lint_load_context.ts. Body links to
docs/guidelines/... use the verbatim ../../docs/... relative form.
Canonical reference: rule-writing § 3b and
docs/contracts/load-context-schema.md.
Apply the Frugality Charter to every context file you author.
Examples in this artifact:
Pre-save self-check:
<add me>, TBD) shipped instead of actual
content?Alternatives
github/awesome-copilot
Use this skill whenever the user mentions IP geolocation feeds, RFC 8805, geofeeds, or wants help creating, tuning, validating, or publishing a self-published IP geolocation feed in CSV format. Intended user audience is a network operator, ISP, mobile carrier, cloud provider, hosting company, IXP, or satellite provider asking about IP geolocation accuracy, or geofeed authoring best practices. Helps create, refine, and improve CSV-format IP geolocation feeds with opinionated recommendations beyon
event4u-app/agent-config
Use when working with Laravel queues in production — Horizon dashboard, worker supervision, job metrics, balancing strategies — even when the user just says 'my jobs are piling up'.
affaan-m/ECC
Production machine-learning engineering workflow for data contracts, reproducible training, model evaluation, deployment, monitoring, and rollback. Use when building, reviewing, or hardening ML systems beyond one-off notebooks.
K-Dense-AI/scientific-agent-skills
Build, inspect, test, and analyze bounded process-based discrete-event simulations with SimPy, including events, resources, interrupts, monitoring, replications, warm-up, and reproducible output analysis.