Skip to content
Back to skills

Grandpa Help

BSecurity

Quick reference, cheat sheet, and rule lookup for Grandpa architecture rules, intensity modes, and native stdlib replacements.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 4, 2026
ai-agentsjavascriptpythonrustgojavabashnodeperformance

Works with

  • terminal
  • cli
  • mcp

Security analysis

B85/100
  • highPerforms destructive filesystem operations

Pro shows the line behind each finding and how to fix it

Scanned October 4, 2026

npx -y skills add bytewhisker/grandpa --skill grandpa-help --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Grandpa Help?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Grandpa Help
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/bytewhisker-grandpa-help/badge)](https://www.skillsdirectory.com/skills/bytewhisker-grandpa-help)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: grandpa-help
description: Quick reference, cheat sheet, and rule lookup for Grandpa architecture rules, intensity modes, and native stdlib replacements.
---

# Grandpa Help: Architecture Quick Reference & Cheat Sheet

Grandpa is the zero-bloat, battle-tested architecture standard and safety engine for AI coding agents.

---

## 1. Quick Syntax & Intensity Modes

Grandpa operates in three intensity modes:

| Mode | Flag / Command | Behavior |
|:---|:---|:---|
| **Soft** | `--intensity=soft` or `/grandpa soft` | Suggests native alternatives, warns on heavy packages, permits exceptions with minimal friction. |
| **Balanced** (Default) | `--intensity=balanced` or `/grandpa balanced` | Requires `--save-exact` or justifications for new dependencies. Demands native fetch, native crypto, native Date. |
| **Hardcore** | `--intensity=hardcore` or `/grandpa hardcore` | Zero new runtime dependencies permitted without architectural receipt. Active pre-commit guard halts execution. |

---

## 2. The Golden Replacement Table

| Bloat Package | Native Alternative | Since | One-Liner Replacement |
|:---|:---|:---|:---|
| `axios` | `fetch` / `Response` | Node 18+ / Browsers | `const res = await fetch(url); const data = await res.json();` |
| `moment` / `dayjs` | `Intl.DateTimeFormat` / `Date` | Modern JS | `new Intl.DateTimeFormat('en-US', { dateStyle: 'short' }).format(d)` |
| `lodash.get` | Optional Chaining | ES2020 | `user?.profile?.address?.city ?? 'Unknown'` |
| `lodash.clonedeep` | `structuredClone` | Node 17+ / All Browsers | `const copy = structuredClone(original);` |
| `uuid` | `crypto.randomUUID()` | Node 15+ / All Browsers | `const id = crypto.randomUUID();` |
| `classnames` / `clsx` | Template Literals / Array Filter | Any JS | `[base, active && 'active', error && 'err'].filter(Boolean).join(' ')` |
| `rimraf` | `fs.rmSync(path, { recursive: true, force: true })` | Node 14.14+ | Standard library `node:fs` |
| `mkdirp` | `fs.mkdirSync(path, { recursive: true })` | Node 10.12+ | Standard library `node:fs` |
| `dotenv` | `node --env-file=.env` | Node 20.6+ | Native flag without imports |
| `chalk` / `kleur` | ANSI escape codes | Modern terminals | `\x1b[32m${text}\x1b[0m` |
| `glob` | `fs.readdir(path, { recursive: true })` | Node 20.1+ | Standard library `node:fs/promises` |
| `is-promise` | `Promise.resolve(val) === val` or `typeof val?.then === 'function'` | Any JS | Pure JavaScript |
| `ms` | Pure JS arithmetic | Any JS | `60 * 1000 // 1 minute` |

---

## 3. The Grandpa Doctrine: 4 Rules

1. **Rule 1: Cut the Fat, Never Cut the Bone**
   Never remove error boundaries, input validation, authentication guards, or retry safety just to reduce LOC. Minimal code with broken edge cases is amateur, not senior.
2. **Rule 2: Built-in Over Built-out**
   If the language runtime (Node, Deno, Bun, Python, Go, Rust) or standard browser platform has the capability built in, third-party libraries are banned.
3. **Rule 3: Single Responsibility Scripts Over Enterprise Micro-Frameworks**
   Do not introduce heavy scaffolding for simple utilities. Write readable, testable, dependency-free functions.
4. **Rule 4: Explicit Receipts for Exceptions**
   If a library is truly needed (e.g., complex cryptographic math, WebGL, high-performance parsers), leave an architectural receipt:
   ```javascript
   // grandpa: allowed dependency [zod] - runtime schema parsing required for untrusted user webhook
   ```

---

## 4. Grandpa CLI Commands

```bash
# Scan working directory for bloated dependencies & fragile patterns
npx grandpa scan

# Run pre-commit safety check with strict CI exit code (fails on bloat)
npx grandpa check --strict

# Launch the interactive audit report
npx grandpa audit

# View quantified dependency, LOC, and bundle savings
npx grandpa gain

# Start the MCP server for AI editor integration
npx grandpa mcp
```

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.