supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
executing-tasks-from-any-source
Execute tasks from both GitHub issues and Basic Memory artifacts using unified workflow - supports intelligent source detection and dual-channel status management
Full skill instructions
The /project:do:task workflow supports both GitHub issues and Basic Memory artifacts through intelligent source detection. This skill explains the dual-source execution pattern.
Core principle: Detect input format → Fetch from appropriate source → Execute unified workflow → Update both channels.
5.1.1-task-*)| Input Format | Example | Source | Worktree Name |
|---|---|---|---|
| Issue number | 123 or #123 | GitHub API | feature/123-auth-implementation |
| Johnny Decimal | 5.1.1-task-auth | Basic Memory | feature/5.1.1-task-auth |
Detection logic:
if [[ $ARGUMENTS =~ ^#?[0-9]+$ ]]; then
# GitHub issue - pure digits with optional #
ISSUE_NUM=$(echo $ARGUMENTS | tr -d '#')
SOURCE="github"
elif [[ $ARGUMENTS =~ ^[0-9]+(\.[0-9]+)+.* ]]; then
# Basic Memory artifact - Johnny Decimal format
ARTIFACT_ID=$ARGUMENTS
SOURCE="basicmemory"
else
echo "Error: Invalid task format. Use GitHub issue (#123) or Johnny Decimal artifact (5.1.1-task-name)"
exit 1
fi
# Fetch issue using GitHub CLI
gh issue view $ISSUE_NUM --json title,body,author,labels,assignees,linkedIssues
# Extract components:
# - Title: Issue headline
# - Body: Full description with acceptance criteria
# - Author: Original creator
# - Labels: Topic tags (feature, bug, etc)
# - Assignees: Current assignee
# - LinkedIssues: Related/parent issues
Pass to using-git-worktrees skill:
feature_identifier: "{ISSUE_NUM}-{slug}"
Example: "123-add-user-authentication"
# Add in-progress label
gh issue edit $ISSUE_NUM --add-label "in-progress"
# Add comment
gh issue comment $ISSUE_NUM -b "Implementation started. Tracking in worktree."
# Remove ready/todo labels
gh issue edit $ISSUE_NUM --remove-label "ready,todo"
# Update labels
gh issue edit $ISSUE_NUM --remove-label "in-progress"
gh issue edit $ISSUE_NUM --add-label "completed"
# Add completion comment with PR link
gh issue comment $ISSUE_NUM -b "Completed in PR #{PR_NUMBER}. See changes above."
Tasks in Basic Memory use this structure:
---
title: "5.1.1-task-user-authentication"
folder: "5-tasks"
entity_type: "task"
entity_metadata:
tags: ["authentication", "user-system"]
status: "pending"
priority: "high"
epic_id: "2.1.1-epic-auth-system"
dependencies: []
---
# Task: Implement User Authentication
## Description
Detailed task description...
## Acceptance Criteria
- [ ] Criterion 1
- [ ] Criterion 2
## Dependencies
- depends_on [[2.1.0-epic-auth-system]]
# Use basicmemory_read_note with Johnny Decimal lookup
# Tool extracts: title, content, frontmatter (status, epic_id, dependencies)
# from 5-tasks folder matching the artifact ID
# Frontmatter fields parsed:
# - status: "pending" | "in-progress" | "completed"
# - epic_id: Parent epic reference (e.g., "2.1.1-epic-auth")
# - priority: "high" | "medium" | "low"
# - dependencies: List of related artifacts
Pass to using-git-worktrees skill:
feature_identifier: "{JOHNNY_DECIMAL}-{slug}"
Example: "5.1.1-task-user-authentication"
# Use basicmemory_edit_note to update frontmatter
basicmemory_edit_note(
identifier: "5.1.1-task-auth",
operation: "find_replace",
find_text: "status: pending",
content: "status: in-progress"
)
# Add implementation note
basicmemory_edit_note(
identifier: "5.1.1-task-auth",
operation: "append",
content: "\n## Implementation Log\n- Started implementation in worktree\n"
)
# Update status to completed
basicmemory_edit_note(
identifier: "5.1.1-task-auth",
operation: "find_replace",
find_text: "status: in-progress",
content: "status: completed"
)
# Add PR link to artifact
basicmemory_edit_note(
identifier: "5.1.1-task-auth",
operation: "append",
content: "\n- Completed in PR: https://github.com/repo/pulls/123\n"
)
Once task is fetched from its source, the remaining workflow is identical:
Deep Technical Analysis (Step 2)
System Impact Assessment (Step 3)
Human Validation Check (Step 4)
Implementation (Steps 6-12)
Completion (Steps 13-15)
GitHub:
# Get linked issues that are blockers
gh issue view $ISSUE_NUM --json linkedIssues --jq '.linkedIssues[] | select(.url | contains("blocked"))'
Basic Memory:
# Read the artifact to find depends_on relations
basicmemory_read_note("5.1.1-task-auth")
# Check frontmatter: dependencies: [...] or look for "depends_on [[...]]" in content
GitHub:
# Find linked parent issue (PRD/Feature)
gh issue view $ISSUE_NUM --json linkedIssues \
| jq '.linkedIssues[] | select(.title | contains("Feature") or contains("PRD"))'
Basic Memory:
# Fetch parent epic using epic_id from frontmatter
basicmemory_read_note("2.1.1-epic-auth-system")
GitHub:
# Update parent issue with progress
gh issue comment $PARENT_ISSUE_NUM -b "Completed task #{ISSUE_NUM}"
# Link completed task to parent
gh issue edit $ISSUE_NUM --add-label "merged"
Basic Memory:
# Update parent epic
basicmemory_edit_note(
identifier: "2.1.1-epic-auth",
operation: "append",
content: "\n- Completed: [[5.1.1-task-user-authentication]]\n"
)
if [[ ! $ARGUMENTS =~ ^(#?[0-9]+|[0-9]+(\.[0-9]+)+.*)$ ]]; then
echo "❌ Invalid task format"
echo "GitHub issue: 123 or #123"
echo "Basic Memory: 5.1.1-task-name"
exit 1
fi
if ! gh issue view $ISSUE_NUM 2>/dev/null; then
echo "❌ GitHub issue #$ISSUE_NUM not found"
echo "Check the issue number and try again"
exit 1
fi
if ! basicmemory_read_note($ARTIFACT_ID) 2>/dev/null; then
echo "❌ Basic Memory artifact $ARTIFACT_ID not found in 5-tasks/"
echo "Check the artifact ID matches Johnny Decimal format: N.N.N-task-*"
exit 1
fi
Called by:
/project:do:task workflow (main entry point)Pairs with:
using-git-worktrees - Creates isolated workspaceexecuting-plans - For comprehensive implementationsubagent-driven-development - For delegated workfinishing-a-development-branch - For cleanup after completionNever:
Always:
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content