Best for
- A new project has been scaffolded and the agents/settings/contexts/ files are still
- The user asks "help me fill in the auth model context", "set up tenant
- A reviewer skill (authz-review, data-flow-mapper, migration-safety,
event4u-app/agent-config/src/skills/context-authoring/SKILL.md
Use when filling knowledge-layer context files — auth-model, tenant-boundaries, data-sensitivity, deployment-order, observability — interactive template walkthrough.
Decision brief
Use when filling knowledge-layer context files — auth-model, tenant-boundaries, data-sensitivity, deployment-order, observability — interactive template walkthrough.
Compatibility matrix
| Platform | Status | Evidence | What to check |
|---|---|---|---|
| Codex | Not declared | No explicit evidence | Portability before use |
| Claude Code | Not declared | No explicit evidence | Portability before use |
| Cursor | Not declared | No explicit evidence | Portability before use |
| Gemini CLI | Not declared | No explicit evidence | Portability before use |
Installation
The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.
npx skills add https://github.com/event4u-app/agent-config --skill "src/skills/context-authoring"Inspect the Agent Skill "context-authoring" from https://github.com/event4u-app/agent-config/blob/6a5670b7881a676c0da90d2afb950298087c4ccb/src/skills/context-authoring/SKILL.md at commit 6a5670b7881a676c0da90d2afb950298087c4ccb. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.
Workflow
1. List agents/settings/contexts/ — which of the five files exist? Which still contain the HTML comment? 2. Ask the user which file to work on. Use numbered options:
1. List agents/settings/contexts/ — which of the five files exist? Which still contain the HTML comment? 2. Ask the user which file to work on. Use numbered options:
For the chosen file, pull what the codebase already reveals before asking the user. Record the file:line citations — they become the authoritative source when the user is unsure.
1. Open the template and treat every HTML comment as a question for the user. Do NOT fabricate answers to skip a section. 2. Present each section as:
1. Remove the top-of-file comment only after at least one section has been authored — an untouched file must stay recognisable as a stub. 2. Keep every heading the template ships with. Reviewer skills grep for exact section names ( Known exceptions, Known alerts, etc.). 3. Do NO…
Permission review
The documentation asks the agent to create, modify, or delete local files.
Remove the top-of-file `<!-- Template shipped by ... -->` comment onlyEvidence record
| Signal | Value | Evidence type | Meaning |
|---|---|---|---|
| Quality score | 91/100 | Computed | Documentation, specificity, maintenance, and trust rules |
| Repository stars | 9 | Source | Repository attention, not individual Skill quality |
| Compatibility | 0 platforms | Source | Declared in the catalog source record |
| Usage guide | automated source guide | Editorial | Generated or reviewed according to the visible evidence level |
Pinned source
Use this skill when:
agents/settings/contexts/ files are still
template stubs from event4u/agent-config.authz-review, data-flow-mapper, migration-safety,
multi-tenant-boundary-review, secrets-and-config-review) reports "I
cannot proceed — agents/settings/contexts/<file>.md is still a template".Do NOT use when:
agent-docs-writing.context-create.domain-invariants.yml, etc.)
— use /memory-add.| File | What it answers | Who reads it |
|---|---|---|
auth-model.md | Roles, permission model, impersonation, known exceptions | authz-review, judge-security-auditor, threat-modeling |
tenant-boundaries.md | Tenancy type, scope propagation, known cross-tenant paths | multi-tenant-boundary-review, blast-radius-analyzer, judge-security-auditor |
data-sensitivity.md | Field classification, masking rules, log-safe types | data-flow-mapper, logging reviewers |
deployment-order.md | Migration strategy, feature flags, rollback plan | migration-safety, judge-bug-hunter, release reviewers |
observability.md | Error tracking, log channels, metrics, known alerts | deploy reviewers, bug-analyzer, incident mode |
The templates ship in src/agent-src/templates/contexts/ and are
copied into agents/settings/contexts/ by the installer.
List agents/settings/contexts/ — which of the five files exist? Which still contain
the <!-- Template shipped by event4u/agent-config. --> HTML comment?
Ask the user which file to work on. Use numbered options:
> 1. auth-model.md — roles, permissions, impersonation
> 2. tenant-boundaries.md — tenancy type and scope propagation
> 3. data-sensitivity.md — field classification and masking
> 4. deployment-order.md — migrations, flags, rollback
> 5. observability.md — errors, logs, metrics, alerts
If multiple files are stubs, default to the order above — auth-model is
the prerequisite for tenant-boundaries; both feed data-sensitivity.
For the chosen file, pull what the codebase already reveals before asking the user. Record the file:line citations — they become the authoritative source when the user is unsure.
| File | Harvest from |
|---|---|
auth-model.md | Policy classes, Gate definitions, permission seeders, role enums, @can directives, middleware |
tenant-boundaries.md | Base query scopes, connection-switching middleware, tenant-resolution service, global scopes, .env vars like TENANT_* |
data-sensitivity.md | ORM hidden-field config (Eloquent $hidden / $casts, Symfony #[Ignore], Prisma select defaults, SQLAlchemy __init__ filters), Sentry beforeSend, logging redaction helpers, API serialisers / resources, export commands |
deployment-order.md | database/migrations/, feature-flag config (Pennant / LaunchDarkly), deploy scripts, CI workflow, rollback runbooks in docs/ |
observability.md | config/logging.php, Sentry init, dashboard links in READMEs, alert rules in Terraform/Grafana dashboards |
Start the walkthrough by showing the harvested evidence — the user only has to confirm or correct, not invent from scratch.
Open the template and treat every HTML comment as a question for the user. Do NOT fabricate answers to skip a section.
Present each section as:
**Section:** <heading>
**Template asks:** <what the comment says>
**Evidence I found:** <file:line references or "none">
**Proposed content:** <draft or "I need your input">
> 1. Accept the draft
> 2. Edit — tell me what's wrong
> 3. I don't know — mark as "TBD" with a follow-up task
If the user picks "TBD", insert an HTML comment <!-- TBD: <question> -->
at that spot — never a fabricated value. Reviewer skills key on the
comment to warn about incomplete sections.
<!-- Template shipped by ... --> comment only
after at least one section has been authored — an untouched file must
stay recognisable as a stub.## Known exceptions, ## Known alerts, etc.).learning-to-rule-or-skill to expand the template upstream../scripts-run src/scripts/check_portability — project-specific content is
expected here, but the check catches accidental copy of other projects'
identifiers../scripts-run src/scripts/check_references — cross-file links between the
five contexts must resolve.<!-- TBD -->
marker stays.agents/settings/contexts/<file>.md updated with project-specific content; every
section either authored or explicitly marked <!-- TBD: ... -->.TBD, and which downstream reviewer skills are now unblocked.agents/learnings/ for any template gap
the user hit (missing section, ambiguous field) — feeds the curated
self-improvement pipeline via learning-to-rule-or-skill.<!-- TBD: ... --> marker is
always better than a made-up entry — reviewer skills trust this file.data-sensitivity.md is the highest-leverage file and also the one most
likely to be skipped as "boring". Prioritise it after auth-model —
missing entries here become production leaks, not review nits.tenant-boundaries.md SHOULD be deleted, not stubbed — the checklist
explicitly says so at the top of the file.If the context file declares its own load_context: (chain reasoning),
use logical names rooted at the source — contexts/<area>/<file>.md
for package material or agents/settings/contexts/<file>.md for project-local
material. The .agent-src.uncondensed/ prefix is rejected by the
schema regex and by scripts/lint_load_context.ts. Body links to
docs/guidelines/... use the verbatim ../../docs/... relative form.
Canonical reference: rule-writing § 3b and
docs/contracts/load-context-schema.md.
Apply the Frugality Charter to every context file you author.
Examples in this artifact:
Pre-save self-check:
<add me>, TBD) shipped instead of actual
content?Frequently asked questions
Use when filling knowledge-layer context files — auth-model, tenant-boundaries, data-sensitivity, deployment-order, observability — interactive template walkthrough.
The source record exposes this install command: npx skills add https://github.com/event4u-app/agent-config --skill "src/skills/context-authoring". Inspect the command and pinned source before running it.
Static rules flagged write-files in the source; the page lists the matching lines and excerpts.
Alternatives
Postpartum-genushyacinthus29/dotnet-skills
Build long-running .NET background services with `BackgroundService`, Generic Host, graceful shutdown, configuration, logging, and deployment patterns suited to workers and daemons.
vasilyu1983/AI-Agents-public
Guides iOS testing with XCTest, XCUITest, Swift Testing, simctl, and xcresult. Use when choosing destinations, controlling flakes, or parsing test artifacts for native apps.
garrytan/gbrain
Generate a publication-quality PDF from any brain page via the gstack make-pdf binary. Strips YAML frontmatter, sanitizes emoji, applies running headers and page numbers. Brain page is always the source of truth; PDF is a rendering.
NVIDIA/skills
How to swap the DeepStream CV detection model in the VSS Alerts Blueprint verification (2d_cv) mode - covers ONNX export, custom bbox parsers, compose mount gotchas, nvinfer config, runtime TRT engine build, deployment, and a segmentation-capable model addendum handoff.