Commit Graph

37 Commits

Author SHA1 Message Date
JonasBa acafdd41d3 feat(skills): Add component-docs skill for MDX stories documentation
Adds a new skill that guides an agent through creating or updating
component documentation in Sentry's .mdx stories format.

The skill covers the full authoring workflow:
- Step 0: Gather editorial content (when to use, alternatives, variant
  semantics, common mistakes, required setup) before writing
- Step 1: Locate the component and determine the correct import paths
- Step 2: Frontmatter structure with category table and resource fields
- Step 3: Import order convention and type-loader usage
- Step 4: Content structure by feature/variant with demo patterns,
  sub-component docs, accessibility section, and See Also format
- Step 5: Manual props table for product components without type-loader

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-04 11:48:55 -08:00
David Cramer fe1dd4f1d4 docs(skills): List all skills and align registration/allowlists (#80)
* docs: list all available skills

* docs(skills): Align registration guidance and skill allowlists

Require alphabetical ordering when updating the Available Skills table\nin contributor guidance and skill creation workflow docs.\n\nSynchronize skill allowlists with the actual sentry-skills directory so\nautomatic skill injection guidance reflects all available skills.\n\nCo-Authored-By: GPT-5 Codex <noreply@openai.com>

---------

Co-authored-by: shuofengzhang <sofuncheung16@gmail.com>
2026-03-04 10:44:54 -08:00
David Cramer 942b2c1421 ref(skills): Promote pr-writer and skill-writer as canonical names (#79)
* ref(skills): Rename PR and skill authoring workflows

Promote pr-writer and skill-writer as canonical skill names while\nkeeping create-pr and skill-creator as compatibility aliases.\n\nUpdate skill registration, settings allowlists, and documentation\nreferences to prefer canonical names.\n\nExtend skill-writer guidance with capability-first naming practices\nand examples for clearer skill discovery.

Co-Authored-By: GPT-5 Codex <noreply@openai.com>

* fix(skills): Address review bot feedback on skill rename

Restrict skill-writer with an explicit allowed-tools frontmatter field,\nremove dead code in quick_validate, and delete orphaned duplicate\nreferences/scripts from the skill-creator alias directory to avoid drift.

Co-Authored-By: GPT-5 Codex <noreply@openai.com>

* fix(skills): Drop allowed-tools from skill-writer

Keep skill-writer frontmatter compatible across clients by avoiding\nthe optional allowed-tools field while retaining the other review\nfixes in this PR.

Co-Authored-By: GPT-5 Codex <noreply@openai.com>

* docs(skill-writer): Default to omitting allowed-tools

Clarify that skill authoring should avoid allowed-tools unless a user\nexplicitly requests strict tool scoping or repo policy requires it,\nsince allowlist syntax differs across clients.

Co-Authored-By: GPT-5 Codex <noreply@openai.com>

* docs(pr-writer): Include update flows in skill discovery text

Expand pr-writer trigger language to explicitly cover updating PR artifacts\nlike title and description, not only creating a new PR.\n\nAlso align the README skill table description so repository docs\nmatch the canonical skill wording.

Co-Authored-By: GPT-5 Codex <noreply@openai.com>

---------

Co-authored-by: GPT-5 Codex <noreply@openai.com>
2026-03-04 10:03:08 -08:00
Priscila Oliveira 7392bd44d9 feat(skills): Add gha-security-review skill
Add a new skill for reviewing GitHub Actions workflows for security
vulnerabilities, covering expression injection, pwn requests, supply
chain attacks, credential escalation, and AI prompt injection via CI.

Includes reference documentation for all major GHA attack vectors.
Also updates AGENTS.md to the concise agent-instructions format and
registers the new skill in settings and the claude-settings-audit allowlist.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-03-04 10:08:27 +01:00
David Cramer ef33bb5032 ref(agents-md): Improve skill with research-backed best practices (#77)
Replace skill-discovery focus with project-analysis approach. Add line
budget guidance (target 60, max 100), file-scoped commands section,
and anti-patterns for linter duplication. Remove Local Skills required
section since agents discover skills automatically. Rewrite AGENTS.md
for this repo to follow the updated guidance.

Co-authored-by: Claude <noreply@anthropic.com>
2026-03-03 15:04:21 -08:00
Greg Pstrucha a4b1ed27b5 feat: Add gha-security-review skill for GitHub Actions exploitation analysis
Add a new skill focused on finding exploitable vulnerabilities in GitHub
Actions workflows. Every finding requires a concrete exploitation scenario
with entry point, payload, execution mechanism, and impact.

Covers 8 attack categories across 9 reference files:
- Pwn requests (pull_request_target + fork checkout)
- Expression injection (branch names, filenames, PR titles)
- Comment-triggered command execution without authorization
- Credential escalation (PAT theft, token scope)
- AI prompt injection via CI config poisoning
- Supply chain (unpinned actions, tag mutation)
- Permissions and secrets misconfiguration
- Runner infrastructure (self-hosted persistence, cache poisoning)

Real-world examples sourced from the HackerBot Claw campaign (2025)
targeting trivy, awesome-go, DataDog, Microsoft, and others.

Co-Authored-By: Claude <noreply@anthropic.com>

Agent transcript: https://claudescope.sentry.dev/share/p0B5R_KHz5RjhqQaQwZDvfNqfnufeAzBGX12pYkmW-k
2026-03-02 13:36:41 -08:00
Josh Ferge 4085f1707f docs(readme): Use GitHub admonition syntax for note 2026-03-02 05:41:05 +00:00
Josh Ferge 6cf2dabdaf docs(readme): Add note pointing to sentry-for-ai for project setup and debugging skills 2026-03-02 05:39:55 +00:00
Priscila Oliveira 63a69c7768 feat(skills): Add create-branch skill
Adds a new skill that creates git branches following Sentry naming
conventions. Detects the username from git config, inspects local
changes or prompts for context, classifies the work type, and
proposes a branch name before creating it.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-02-26 10:37:24 +01:00
Rahul Chhabria a81477bbc2 chore: Register blog-writing-guide skill in permissions and docs
Add blog-writing-guide to the settings.json allowlist, README skills
table, and claude-settings-audit allowlist so the skill is discoverable
and usable after merge.

Co-Authored-By: Claude <noreply@anthropic.com>
2026-02-23 23:17:26 -08:00
David Cramer 8ac472aae0 feat(skill-creator): Add skill synthesis guide and upstream best practices (#52)
* feat(skill-creator): Synthesize upstream best practices into skill-creator

Research and incorporate patterns from Anthropic's and OpenAI's
skill-creators, the Agent Skills spec, and best practices docs.
Adds planning step, description guidelines, validation script,
Claude Code extension docs, workflow/output patterns, and
expanded anti-patterns.

Co-Authored-By: Claude <noreply@anthropic.com>

* docs: Add skill synthesis guide

Document the agent-driven workflow for researching upstream
implementations and best practices when creating new skills.
Pairs with the skill-creator skill — synthesis handles research,
skill-creator handles implementation.

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-02-18 03:55:37 -08:00
David Cramer 9c0e34277f fix(skills): Standardize allowed-tools format and remove model attribute (#43)
* fix(skills): Standardize allowed-tools to comma-separated format

Claude Code docs specify comma-separated format for allowed-tools.
Update all skill frontmatters, documentation, and the scan_skill.py
parser to use and support comma-separated tool lists.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(skills): Remove model attribute from skill documentation

Skills should not hardcode model overrides — let users control
which model runs their skills.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-10 14:57:28 -08:00
David Cramer 708bcc5f87 feat(skills): Add skill-scanner skill for agent skill security analysis (#40)
Scan agent skills for prompt injection, malicious scripts, excessive
permissions, secret exposure, and supply chain risks before adoption.
Uses a hybrid approach: Python script for deterministic static analysis
(regex patterns, encoding detection, YAML parsing) and agent for
semantic analysis (intent evaluation, false-positive filtering).

Co-authored-by: Claude <noreply@anthropic.com>
2026-02-10 11:50:51 -08:00
David Cramer c8881564e7 feat(skills): Add skill-creator skill for guided skill authoring (#39)
* feat(skills): Add skill-creator skill for guided skill authoring

Adds a new skill that walks agents through creating skills for this
repository, covering requirements gathering, writing SKILL.md with
proper frontmatter, creating supporting files, and completing all
registration steps.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* ref(skill-creator): Generalize skill to work in any repository

Remove sentry-skills-specific paths and registration steps. The skill
now teaches general Agent Skills spec conventions and defers to the
target repository's CLAUDE.md for project-specific registration.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-06 11:09:00 -08:00
Greg Pstrucha 818d59c6a2 feat(code-simplifier): Add code-simplifier as skill for Warden
Sync the code-simplifier agent as a skill to make it directly usable in
Warden. Adds SKILL.md with frontmatter, examples, and refinement
principles based on Anthropic's official code-simplifier agent.
2026-01-31 15:06:22 -08:00
David Cramer 438087c0a3 docs: Restructure README installation and contributing sections (#29)
Simplify installation to two primary methods (Claude Code marketplace
and skills.sh) and consolidate all developer content under Contributing.
Apply Plain Speech guidelines with concise, direct language.

Co-authored-by: Claude <noreply@anthropic.com>
2026-01-29 12:58:14 -08:00
David Cramer dd0e2234f6 feat(security-review): Add security review skill with OWASP references
Add a focused security code review skill that evaluates specific files
or changes against OWASP vulnerability patterns.

Features:
- 10 security categories: Injection, XSS, Auth, Authorization, Crypto,
  Data Exposure, SSRF, Deserialization, File Operations, Modern Threats
- Reference files with detailed patterns and remediation guidance
- Reports only actual vulnerabilities, not best-practice suggestions
- Focused on single file/change review, not codebase mapping

Reference material derived from OWASP Cheat Sheet Series (CC BY-SA 4.0).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-29 11:51:37 -08:00
David Cramer b92d637523 docs: Add guidance on where skills should live
Explains the three-tier approach for skill placement:
- Global skills in sentry-skills plugin
- Domain-specific skills in dedicated plugins (e.g., infra-skills)
- Repo-specific skills in the repository itself

Also documents how the marketplace structure works - this repo can
host multiple plugins that users install independently.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-27 14:57:56 -08:00
David Cramer 817cea320c docs: Add vendoring skills guidelines
Explains why we vendor skills (consistency, customization, reliability)
and how to retain attribution via comments and LICENSE files.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-27 14:56:29 -08:00
Josh Ferge 9024c783a8 feat: Add doc-coauthoring skill
Add the doc-coauthoring skill from anthropics/skills to help Sentry
employees with structured documentation workflows for proposals,
technical specs, decision docs, and similar content.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-20 15:22:27 -05:00
David Cramer a5c3762d7a feat: Add brand-guidelines skill for Sentry brand guidelines (#25)
Add a new skill that helps write copy following Sentry's brand
guidelines. Covers both Plain Speech (default for UI) and Sentry Voice
(personality-rich) tones, with guidance on tone selection, word choices,
dash usage, UI element guidelines, and anti-patterns.

Co-authored-by: Claude <noreply@anthropic.com>
2026-01-20 10:39:11 -08:00
David Cramer c4fb3e72c3 Swap deslop for code-simplifier agent (#20)
* Replace deslop skill with code-simplifier

- Add new code-simplifier skill with comprehensive simplification guidelines
- Remove old deslop skill directory
- Update README.md to reference code-simplifier instead of deslop
- Update .claude/settings.json with code-simplifier permission
- Update claude-settings-audit skill to include code-simplifier in recommendations

The code-simplifier skill is based on Anthropic's approach and provides more comprehensive code simplification beyond just removing slop, including simplifying complex logic, removing unnecessary abstractions, and improving code readability while maintaining functionality.

Co-authored-by: david <david@sentry.io>

* Convert code-simplifier from skill to subagent

- Create agents/ directory for subagents
- Add code-simplifier.md subagent using Anthropic's official version
- Remove code-simplifier from skills directory
- Update README.md to document subagents separately from skills
- Update .claude/settings.json to remove code-simplifier skill permission (subagents don't require permissions)
- Update claude-settings-audit to not recommend code-simplifier skill
- Update repository structure documentation

The code-simplifier is now a proper subagent following Anthropic's official implementation from claude-plugins-official repo.

Co-authored-by: david <david@sentry.io>

* Add attribution for code-simplifier subagent

- Add source attribution comment to code-simplifier.md pointing to Anthropic's official repo
- Create agents/README.md to document subagents and their sources
- Ensures proper credit and traceability for externally sourced subagents

Co-authored-by: david <david@sentry.io>

* Update attribution to note prior art without license

- Changed attribution from license reference to prior art acknowledgment
- Verified that anthropics/claude-plugins-official has no license file
- Updated both code-simplifier.md and agents/README.md accordingly
- Clarifies we're noting this as prior art from Anthropic rather than claiming any specific license

Co-authored-by: david <david@sentry.io>

* Simplify attribution to just note source

- Remove license commentary from code-simplifier.md
- Remove license mention from agents/README.md
- Keep clean attribution showing it's based on Anthropic's subagent

Co-authored-by: david <david@sentry.io>

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
2026-01-14 10:32:10 -08:00
David Cramer 65aa458f2c feat: Add agents-md skill for maintaining AGENTS.md files
New skill that guides agents to create and maintain concise AGENTS.md
documentation with CLAUDE.md as a symlink. Enforces minimal style with
headers, bullets, and skill references instead of verbose prose.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-10 10:45:27 -08:00
Andrew McKnight 4e84ef32bd fix(README): local clone plugin installation 2026-01-08 14:48:20 -09:00
David Cramer 4fbd6556ed docs: Update GitHub URLs for repo rename to getsentry/skills
Update README installation instructions to reference the new repository
name after renaming from getsentry/sentry-skills to getsentry/skills.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-06 10:54:07 -08:00
David Cramer 2f63686e4b Merge pull request #4 from getsentry/claude-settings-skill
feat: Add claude-settings-audit skill
2026-01-06 09:58:34 -08:00
David Cramer ea591e9b22 feat: Add claude-settings-audit skill
Analyzes repositories to generate recommended Claude Code settings.json
permissions based on detected tech stack:
- Detects languages (Python, Node, Go, Rust, Ruby, Java)
- Detects build tools (Docker, Make, Terraform)
- Suggests baseline commands (git, gh, file exploration)
- Suggests framework-specific WebFetch domains
- Suggests MCP servers (Sentry, Linear) when applicable

Also updates this repo's settings.json with recommended allow list.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-06 09:52:57 -08:00
David Cramer 8bba5745db Rely on bash commands 2026-01-05 19:26:24 -08:00
David Cramer 1b0a0e00fa Merge pull request #3 from getsentry/add-create-pr-skill
feat: Add create-pr skill for Sentry PR conventions
2026-01-05 16:53:13 -08:00
David Cramer c32f22bd94 feat: Add create-pr skill for Sentry PR conventions
New skill that guides PR creation following Sentry's engineering practices:
- PR description structure (what, why, alternatives, context)
- Title format following commit conventions
- Issue reference syntax (Fixes/Refs)
- Guidelines on PR scope and reviewer assignment

Notably excludes "Test plan" sections per Sentry conventions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-05 16:52:04 -08:00
David Cramer c17f830b14 Add iterate-pr skill for automated PR iteration
New skill that automates the CI feedback loop:
- Checks CI status first, waits for bot checks (sentry/codecov/cursor/bugbot/seer)
- Gathers review feedback from humans and bots
- Investigates failures via gh run view --log-failed
- Validates feedback before acting on it
- Commits fixes and waits for CI to complete
- Repeats until all checks pass

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-05 16:42:17 -08:00
David Cramer 762c8a3a42 Update README and AGENTS.md documentation
- Clarify repo is primarily for Claude Code but follows open Agent Skills format
- Add instruction to update README when creating new skills
- Remove duplicated skills list from AGENTS.md
- Add missing deslop skill to README

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-05 16:16:08 -08:00
David Cramer 6358fc4701 Fix information on updates 2026-01-05 16:01:20 -08:00
David Cramer b8cab86eac add find-bugs and update docs 2026-01-05 15:55:29 -08:00
David Cramer 622bafc03b correct source path 2026-01-05 14:46:49 -08:00
David Cramer 5ae6cbb122 reorganize 2026-01-05 14:44:41 -08:00
David Cramer da8f1cd882 first commit 2026-01-05 14:43:16 -08:00