supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
issue-workflow-orchestrator
Issueワークフロー統括スキル。Issue受領から実装・検証・PRレビュー完了までを、分類に応じたテンプレートで統括し、フェーズ成果物を構造化して引き継ぎながら進行する。 トリガー条件: - 「Issue #N を修正して」「#N を直してPRまで」 - 「/fix-issue 123」「/orchestrate-issue 123」 - Issue修正の全体統括が必要な時 注意: 実装そのもの、コード生成、レビュー判断の最終決裁は行わない(該当スキルへ委譲し、統括は状態と根拠の整合性を担保する)
Full skill instructions
Issue(タスク要求)の受領から、実装・検証・PRレビュー完了までを、分類に応じたテンプレートで統括し、フェーズ成果物を構造化して引き継ぎながら進行する。
input:
issue_id: "#123" # 必須
repo: "org/repo" # 任意(デフォルトはカレント)
target_branch: "main" # 任意
execution_mode: "auto|assist|manual" # 任意(デフォルト: assist)
constraints:
time_budget_minutes: 120 # 任意(運用上の上限)
risk_tolerance: "low|medium|high" # 任意(デフォルト: medium)
allow_scope_change: false # 任意
context_hints:
related_prs: ["#456"] # 任意
suspect_files: ["src/..."] # 任意
resume:
workflow_run_id: "wf_..." # 任意:途中再開時に指定
workflow_plan:
workflow_run_id: "wf_2025-12-30_abc123"
issue_id: "#123"
repo: "org/repo"
classification:
type: "bugfix" # bugfix/feature/refactor/chore/security/docs
severity: "major" # trivial/minor/major/critical
confidence: 0.78
rationale: ["..."]
selected_template: "major_bugfix_v2"
phases: [...] # 下記参照
current_phase: "context"
progress:
percent: 18
updated_at: "2025-12-30T..."
governance:
stop_conditions: [...] # 下記参照
approval_points: [...]
artifacts: {...} # 成果物参照
workflow_status_summary:
headline: "Issue #123: context収集中(再現条件の特定中)"
next_actions: ["ログ採取", "再現手順の最小化"]
blocking_risks: ["repro uncertain", "dependency version mismatch"]
human_questions: ["期待仕様はAとBどちら?"]
詳細は references/classification.md を参照。
| severity | 定義 |
|---|---|
trivial | ドキュメント/typo/コメント/CI設定。機能影響が限定的 |
minor | 限定ケースのバグ、影響範囲が狭い、ロールバック容易 |
major | 主要フローに影響、複数モジュールに波及、テスト追加が必須 |
critical | データ破壊、セキュリティ、広範囲障害、緊急対応が必要 |
| type | 定義 |
|---|---|
bugfix | 既存機能の不具合修正 |
feature | 新機能追加 |
refactor | 機能変更なしの内部改善 |
chore | 依存更新、CI、ドキュメント等 |
security | セキュリティ修正(別テンプレート適用) |
docs | ドキュメントのみ |
各フェーズは以下の契約を持つ:
phase:
id: "phase_id"
skill: "/skill-name"
status: "pending|in_progress|completed|failed|skipped"
entry_criteria: ["前提条件リスト"]
exit_criteria: ["完了条件リスト"]
on_failure: "retry|rollback|escalate|halt"
artifacts_in: ["入力成果物"]
artifacts_out: ["出力成果物"]
| # | phase_id | skill | 目的 |
|---|---|---|---|
| 1 | intake | /issue-intake | Issue初期トリアージ |
| 2 | context | /eld-sense-activation | コンテキスト活性化 |
| 3 | onboarding | /ai-led-onboarding | 最小スキーマ構築 |
| 4 | uncertainty | /resolving-uncertainty | 不確実性解消 |
| 5 | task_decomposition | /eld-sense-task-decomposition | タスク分解 |
| 6 | observation | /observation-minimum-set | 観測計画 |
| 7 | implementation | /eld | 実装ループ |
| 8 | review | /eld-ground-pr-review | PRレビュー |
詳細は references/phase-definitions.md を参照。
フェーズ間で引き継ぐ成果物の構造。詳細は references/artifact-contracts.md を参照。
| artifact_id | 生成フェーズ | 構造 |
|---|---|---|
intake_report | intake | Issue要約、受け入れ条件、リスク初期値 |
context_pack | context | 再現手順、ログ、関連コード範囲 |
risk_register | context/uncertainty | unknown一覧、影響と確度、解消手段 |
task_plan | task_decomposition | タスク分解、スコープ境界、テスト計画 |
observation_plan | observation | 観測点、計測方法、リグレッション観点 |
diff_summary | implementation | 変更差分、影響ファイル |
test_report | implementation | テスト結果、失敗ログ |
review_report | review | レビュー結果、マージ可否 |
stop_conditions は「検知→判断→遷移」の3点セットで定義。
stop_conditions:
- id: "security_vulnerability_detected"
detection:
- "sast_findings.critical > 0"
- "secret_leak detected"
- "dependency_cve.severity == high"
threshold: "any"
action: "halt_and_escalate"
- id: "scope_change_detected"
detection:
- "affected_modules_count > 3"
- "new_requirements_added"
threshold: "any"
action: "pause_for_approval"
- id: "test_failure_threshold"
detection:
- "test_report.failed_count > 5"
threshold: "exceeded"
action: "halt_and_review"
- id: "time_budget_exceeded"
detection:
- "elapsed_minutes > time_budget_minutes"
threshold: "exceeded"
action: "pause_for_approval"
| action | 説明 |
|---|---|
halt_and_escalate | 即座に停止し、人間にエスカレーション |
pause_for_approval | 一時停止し、承認を待つ |
halt_and_review | 停止し、レビューを要求 |
retry | 再試行 |
rollback | 前フェーズに戻る |
approval_points:
- id: "scope_change_approval"
required_when: "scope_change_detected"
approver: "human"
- id: "security_fix_handling"
required_when: "security_vulnerability_detected"
approver: "security_team"
- id: "major_refactor_approval"
required_when: "type == refactor AND affected_files > 10"
approver: "tech_lead"
resume.workflow_run_id を指定することで、中断したワークフローを再開可能。
# 再開時の入力
input:
issue_id: "#123"
resume:
workflow_run_id: "wf_2025-12-30_abc123"
再開時の動作:
workflow_run_id から状態を復元current_phase から継続各フェーズは以下を保証:
force: true で上書き可)分類に応じて異なるテンプレートを選択。詳細は references/workflow-templates.md を参照。
| template_id | 適用条件 | 特徴 |
|---|---|---|
trivial_fix_v1 | severity=trivial | intake→implementation→review(簡略化) |
minor_bugfix_v1 | severity=minor, type=bugfix | 標準フロー |
major_bugfix_v2 | severity=major, type=bugfix | 標準フロー+強化観測 |
critical_hotfix_v1 | severity=critical | 緊急フロー(並列化、承認省略可) |
security_fix_v1 | type=security | セキュリティ強化フロー |
feature_v1 | type=feature | 設計フェーズ追加 |
出力に必ず含まれる可視化データ:
progress:
percent: 45 # 完了フェーズ数/総フェーズ数
current_phase: "implementation"
phases_completed: ["intake", "context", "uncertainty", "task_decomposition"]
phases_remaining: ["implementation", "review"]
updated_at: "2025-12-30T10:30:00Z"
timeline:
- phase: "intake"
started_at: "2025-12-30T09:00:00Z"
completed_at: "2025-12-30T09:05:00Z"
duration_minutes: 5
- phase: "context"
started_at: "2025-12-30T09:05:00Z"
completed_at: "2025-12-30T09:20:00Z"
duration_minutes: 15
# ...
blocking_risks:
- id: "repro_uncertain"
description: "再現条件が不安定"
impact: "high"
mitigation: "追加ログ収集中"
human_questions:
- id: "spec_clarification"
question: "期待仕様はAとBどちら?"
context: "Issue本文に両方の解釈が可能な記述"
blocking_phase: "implementation"
issue_id からIssue情報を取得/issue-intake を呼び出して初期分類workflow_run_id を生成for each phase in selected_template.phases:
1. entry_criteria をチェック
- 満たさない場合: 前フェーズに問題あり → on_failure 処理
2. 該当スキルを呼び出し
- artifacts_in を渡す
- 結果を artifacts_out に格納
3. exit_criteria をチェック
- 満たす場合: status = "completed"
- 満たさない場合: on_failure 処理
4. stop_conditions をチェック
- 該当する場合: action を実行
5. approval_points をチェック
- 該当する場合: 承認待ち
6. progress を更新
workflow_status = "completed"User: Issue #123 を修正して
Claude:
## Workflow Orchestrator 起動
### Issue取得中...
Issue #123: "認証エラーが発生する"
### intake フェーズ実行中...
/issue-intake を呼び出し
### 分類結果
- type: bugfix
- severity: major
- confidence: 0.72
### テンプレート選択
major_bugfix_v2 を適用
### ワークフロープラン
workflow_run_id: wf_2025-12-30_xyz789
| # | phase | status |
|---|-------|--------|
| 1 | intake | completed |
| 2 | context | in_progress |
| 3 | onboarding | pending |
| 4 | uncertainty | pending |
| 5 | task_decomposition | pending |
| 6 | observation | pending |
| 7 | implementation | pending |
| 8 | review | pending |
### 現在のフェーズ: context
/eld-sense-activation を実行中...
続行しますか?
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content