Playbook

api-design is a REST API design skill for planning and reviewing endpoints, resource naming, status codes, pagination, filtering, versioning, and error responses.

ai-first-engineering is a concise operating model for teams where AI agents generate much of the implementation work. It helps set Agent Standards for planning, architecture, review, and testing, with guidance on install, usage, and when to apply the skill.

writing-skills is a Skill Authoring guide for creating, editing, and validating agent skills with a test-driven workflow. Learn the key files, prerequisites, and practical steps for pressure scenarios, baseline tests, and concise SKILL.md iteration.

writing-plans helps turn a spec or requirements doc into a detailed implementation plan with file-level guidance, task sequencing, testing steps, and a review prompt before coding starts.

verification-before-completion is a final-check skill that blocks unsupported completion claims. Learn when to use it, how to install it from obra/superpowers, and how to match each status claim to fresh verification evidence.

Install and use the test-driven-development skill to enforce strict TDD: write a failing test first, verify the failure, implement the minimum code, then refactor safely.

systematic-debugging is a root-cause-first debugging skill for bugs, flaky tests, build failures, and unexpected behavior. Learn the four-phase workflow, companion files, and when to use it before proposing fixes.

subagent-driven-development is a skill for executing implementation plans with a fresh subagent per task, then reviewing each result in two passes: spec compliance first, code quality second. It includes prompt templates for the implementer, spec reviewer, and code quality reviewer.

executing-plans helps agents follow a written implementation plan: review it first, execute tasks in order, run specified checks, stop on blockers, and hand off to a finishing workflow. Best for Project Management and other plan-led delivery.

error-handling-patterns helps teams choose exceptions vs Result types, classify failures, propagate context, and design graceful degradation for more reliable APIs and services.

attack-tree-construction helps build structured attack trees for Threat Modeling with clear root goals, AND/OR branches, and testable leaf attacks. Use it to map attack paths, expose defense gaps, and support security review, testing, and mitigation planning.

stride-analysis-patterns helps agents run a structured STRIDE threat-modeling pass for architectures, APIs, and data flows. Install from the wshobson/agents repo, read the SKILL.md file, and use it to turn system descriptions into categorized threats and control-focused review output.

The threat-mitigation-mapping skill helps map identified threats to preventive, detective, and corrective controls across layers, supporting defense-in-depth, remediation planning, and control coverage review.

Use the pci-compliance skill to guide PCI DSS architecture reviews, scope reduction, gap analysis, and payment data handling decisions. Best for teams designing payment flows, preparing for assessments, or reviewing controls before a compliance review.

The track-management skill helps teams create, manage, and complete Conductor tracks with spec.md, plan.md, lifecycle metadata, and tracks.md workflow guidance.

workflow-patterns is a Conductor-style process skill for task execution with TDD, plan.md status tracking, verification checkpoints, and disciplined commit handling.

code-review-excellence helps agents produce clearer, more constructive code reviews with better prioritization, reviewer tone, and actionable feedback for pull requests, mentoring, and team review standards.

The debugging-strategies skill provides a structured debugging playbook for reproducing issues, testing hypotheses, isolating causes, and finding root problems across bugs, crashes, leaks, and performance regressions.

postmortem-writing helps teams create blameless incident postmortems with timelines, root cause analysis, contributing factors, impact, and actionable follow-up items for report writing after outages or near-misses.

Learn the on-call-handoff-patterns skill for reliable shift transitions. Use it to structure incident handoffs, capture active issues, recent changes, escalation state, and next actions for Reliability teams.

The gdpr-data-handling skill helps teams turn GDPR requirements into practical review guidance for consent, lawful basis, data subject rights, retention, and privacy-by-design decisions.

incident-runbook-templates helps teams create structured incident response runbooks with clear triage, mitigation, escalation, communication, and recovery steps for outages and operational Playbooks.

team-communication-protocols defines messaging rules for agent teams, covering direct vs broadcast messages, plan approval, shutdown procedures, and reusable templates for coordinated Agent Orchestration.

multi-reviewer-patterns helps agents run parallel code reviews across security, performance, architecture, testing, and accessibility, then deduplicate findings, calibrate severity, and deliver one consolidated report. Includes install context, key files, and practical usage guidance.