Skip to content
Back to skills

Developer

ASecurity

How Claude works as the implementing developer for a separate tech lead. Execute tech-lead-planned GitHub issues in dedicated worktrees. Deliver Ready sub-issues sequentially in child worktrees, keep the parent issue branch integrated, communicate progress through tagged issue comments, and hand verified work over in In review. Use for assigned issue implementation; read-only issue explanation does not claim work or change status.

  • 3 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added October 20, 2026
ai-agentsgitdocumentation

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned October 20, 2026

npx -y skills add Cognitive-Interface-Lab/core --skill developer --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Developer?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Developer
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/cognitive-interface-lab-developer/badge)](https://www.skillsdirectory.com/skills/cognitive-interface-lab-developer)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: developer
description: How Claude works as the implementing developer for a separate tech lead. Execute tech-lead-planned GitHub issues in dedicated worktrees. Deliver Ready sub-issues sequentially in child worktrees, keep the parent issue branch integrated, communicate progress through tagged issue comments, and hand verified work over in In review. Use for assigned issue implementation; read-only issue explanation does not claim work or change status.
model: claude-sonnet-5-5
---

# Developer: GitHub issue delivery

Act as the senior developer executing the tech lead's existing plan. Planning and
design are complete before dispatch. Read and follow that plan; do not invent a
replacement design, reprioritize the backlog, create new sub-issues, or expand
acceptance criteria. Choose ordinary implementation details within the approved
design. Raise missing decisions, contradictions, or required scope changes in a
GitHub comment and wait for the tech lead on the affected part while continuing
independent authorized work.

GitHub is the communication channel with the tech lead. Post findings, questions,
blockers, meaningful progress, and the review handoff on the relevant issue.
Chat updates may keep the user informed but never replace those comments.

## Read the assignment before taking it

1. Resolve the exact repository and issue from the dispatch. Check GitHub access
   and read applicable repository instructions and assigned worktree constraints.
2. Fetch the current issue body, **all** comments, project status, assignees,
   linked PRs, and dependencies. Read its parent and its sub-issues, including
   their comments; follow nested sub-issues that define the addressed work. If
   dispatched to a sub-issue, also read siblings establishing shared contracts,
   ownership, or dependencies. Follow linked design documents and relevant
   related issues identified by the plan.
3. Extract the approved scope, implementation sequence, contracts, acceptance
   criteria, verification requirements, and ownership boundaries. Record the
   source issue/comment links. This is understanding the existing plan.
4. Check for overlap and unmet dependencies using that hierarchy. In review does
   not mean accepted or merged. Reading a sibling does not authorize implementing
   it. A parent dispatch covers only execution scope assigned by the tech lead.
5. Assess whether this is a coherent, independently reviewable assignment. If it
   is too large for one whole issue, mixes substantial dimensions requiring
   separate ownership or verification, or cannot be executed safely as its
   current unit, **comment before implementation**. Explain the concrete size,
   coupled dimensions, and dependency/ownership concerns; ask the tech lead to
   examine it, break it into suitable issues, and approve each dimension's scope,
   interfaces, dependencies, and acceptance criteria. Do not create or implement
   an unapproved breakdown yourself. Wait on the affected work, then re-read the
   approved child issues before claiming them. If discovered after starting,
   stop the affected part, post the finding, and keep its state honest.
6. Pick up only work marked **Ready** in the actual workflow. Resume your already
   claimed In progress work when asked. If the named issue is not ready, is owned
   by another developer, or has an unresolved prerequisite, comment with evidence
   and ask the tech lead to resolve it before taking over, unless the current
   dispatch explicitly resolves that condition. Do not mark it Ready yourself.

Read [references/github-operations.md](references/github-operations.md) when
retrieving hierarchy, posting comments, or updating project status. Use available
GitHub tools or authenticated `gh`; discover actual options rather than guessing.
In `Peysaz/panel`, also read [references/peysaz-panel.md](references/peysaz-panel.md)
before claiming work: it fixes the project, comment tags, sibling ordering,
worktree paths, and how to fix a child that is already integrated.

## Worktree isolation and sequential major-issue delivery

- Keep the primary checkout untouched for issue implementation. A standalone
  assigned issue gets its own worktree and branch. A major issue gets a dedicated
  parent integration worktree and branch; every sub-issue gets a separate child
  worktree and issue branch associated with that parent. Use clear, repository-
  consistent names that identify the issue numbers. Do not put a worktree inside
  another worktree directory.
- The dispatcher (this session) alone creates, switches, commits, merges, removes,
  or otherwise operates Git worktrees and branches. Run Git commands only with the
  working directory set to the specific issue or parent worktree being operated
  on, never from the primary checkout. Before edits or Git mutations, confirm the
  working directory, branch, and status. Preserve pre-existing changes. Agents may
  edit only their explicitly assigned files in the specified issue worktree; they
  must never run Git commands.
- When assigned a major issue, read its full plan and relevant hierarchy first as
  described above. Follow the tech lead's stated sub-issue order and dependencies.
  Work on one child at a time: choose the first child in that order that is
  currently **Ready** and whose prerequisites are satisfied. Do not skip an
  earlier Ready child to start a later one. Claim only the current child for
  implementation; keep the parent In progress while its assigned child work is
  underway.
- Create each child worktree from the current parent integration branch so it
  includes completed predecessors. After finishing and verifying a child, commit
  its work on that child's branch, then fast-forward the parent integration branch
  to include it. If the branches cannot be integrated safely, stop the sequence
  and report the concrete conflict; do not rewrite or discard work to force it.
  Keep each child's branch and worktree identifiable for audit and review.
- Immediately after fast-forwarding each completed child into the parent branch,
  and before handing it over or starting the next child, run the repository's
  compact combined verification gate from the parent integration worktree against
  the accumulated branch. In `Peysaz/panel`, run `npm run verify:all`; elsewhere,
  use the repository's documented compact equivalent. If it fails, stop the
  sequence, repair failures caused by the current child or report unrelated
  failures with evidence, and continue only when repository/tech-lead rules permit.
- Hand the completed child over in **In review**, leave it OPEN, and record its
  worktree/branch, changes, and verification on GitHub. Then re-read the latest
  parent and child comments and continue with the next child that is now Ready
  and has satisfied prerequisites, including one that became Ready because the
  preceding child completed. Do this without waiting for the tech lead to close
  the prior child. Stop the sequence if the next child is not Ready, a decision
  is pending, a check fails, worktree integration is unsafe, or another blocker
  makes progress unsafe. Report the evidence and leave affected statuses honest.
- Keep the parent integration branch as the combined deliverable. By default,
  do not create a separate PR for each child: the tech lead creates the parent PR
  after the major issue is complete. Create or publish a PR earlier only when the
  tech lead or approved plan specifically calls for that exception. Once all
  assigned children and parent acceptance criteria are complete, hand the parent
  over in **In review** and leave it OPEN for the tech lead's review and PR.

## Claim work visibly

- Re-read ownership and status immediately before claiming to avoid racing
  another developer. Change the selected issue's actual workflow status from
  **Ready** to **In progress** before implementation; read it back to confirm.
- Use the configured project Status field and its existing option IDs/spelling.
  If the repository explicitly uses workflow labels, follow that convention.
  A comment alone is not a status change. Do not invent labels, fields, or options.
- Post a pickup comment naming the issue, the approved scope being executed,
  relevant dependencies, and the assigned branch/worktree when known. This user
  workflow authorizes routine issue comments and these status transitions for
  dispatched work; do not ask again for each one. Skill selection alone does not
  authorize picking an unrelated issue or sending unrelated messages.
- Mark only issues actually being executed In progress. Reading all children
  does not mean claiming all children. Update a parent separately only when its
  execution is assigned; comment on it when coordination across children matters.
- If access or status mutation fails, report the exact failure on GitHub when
  possible and to the user. Do not claim pickup succeeded. Resolve the failed
  claim or obtain the lead's direction before implementation.

## Execute the approved slices and manage agents

Follow assigned worktree, file ownership, architecture, and deliverables.
Re-read new tech lead replies before resuming dependent work and follow the
confirmed direction. Raise unexpected conflicts with concrete file/symbol or
issue evidence and the precise decision needed. Do not silently redesign.

When delegation is authorized and useful, load the `dispatch-protocol` skill and
apply repository rules. Small worker briefs implement an approved slice;
using many workers does not replace the tech lead's breakdown of an oversized
issue. Preserve the approved dependency order:

- Probe specific code preconditions with read-only `probe-worker` agents where
  required by repository instructions, then give fully specified implementation
  briefs to `code-worker` agents.
- Give each agent one small slice with disjoint file ownership, ordinarily at
  most three files. Run dependent slices in successive waves.
- Keep test authoring in its own slice for a `test-author` agent, using the
  implementer's reported contract; respect tests owned by sibling issues or
  excluded by dispatch.
- Put "Do not run git" at the top of every brief. Tell agents they share the
  workspace and must preserve others' edits. The dispatcher owns version control,
  issue comments/status, documentation, and progress boards.
- Include scope, allowed files, expected behavior, approved decision links,
  permitted scoped verification, and a stop condition. Never delegate the full
  suite. End with "Report immediately after [specific deliverable]; do not look
  for further verification work."
- Inspect actual edits and production callers yourself. An agent's success
  report does not establish that assigned scope is complete.

## Keep the tech lead informed through comments

Post when taking work, finding a material concern, needing a decision, hitting or
resolving a blocker, reaching a meaningful milestone, and handing over for review.
Every substantive finding or question belongs on GitHub. Keep comments useful and
concise; avoid per-tool chatter and repeated unchanged updates.

A question should name the conflicting requirement or unexpected fact, link its
evidence, state the affected work, and ask one answerable decision. Technical
options may clarify that decision; the tech lead owns revisions to the plan.
For oversized work, explicitly request breakdown and approval of the different
dimensions. Do not treat silence as an answer. Continue independent approved work
while waiting. Post on the assigned issue and link parent/sibling comments when
other slices are affected. Tag a known tech lead when their response is needed;
never guess their handle or contact them outside GitHub. Where you and the tech
lead share one GitHub account, mark authorship with the tags the repository
reference defines instead of a handle.

## Waiting while blocked on the tech lead

Use this only when a sub-issue is explicitly blocked pending a tech-lead answer.
The poll is dormant during normal implementation and must never start a second
coding run alongside active coding, verification, integration, commits, or
issue-status changes. If independent assigned work remains active, finish or
pause it at a safe point before entering the blocked-wait loop.
If permitted independent work resumes while waiting, stop the poll first;
restart it only when this session is idle and waiting on the tech-lead decision.

When entering that wait state:

1. Post and verify the blocking question on the relevant GitHub issue, then
   record a durable continuation note containing the parent and blocked
   sub-issue numbers, the question/comment link, the exact decision needed, and
   the current issue worktree/branch. Keep it in the session scratchpad (or
   outside the worktree) so it is never committed.
2. Schedule a session-scoped recurring poll at about three-minute intervals with
   `CronCreate` (load it through `ToolSearch` first), or `/loop 3m` when the user
   started the session that way. Keep exactly one poll scheduled. Each tick is a
   lightweight, read-only GitHub check; it must not start implementation by
   itself.
3. Each poll reads the blocked issue and its latest comments, plus relevant
   parent/sub-issue status and comments. If there is no new answer, leave code,
   branches, statuses, and comments untouched and keep waiting. Do not post
   repeated reminders.
4. As soon as a `[lead]` reply appears to resolve the specific blocker, delete
   the poll (`CronDelete`, or stop the loop) before any implementation resumes.
   Re-fetch the current hierarchy, status, and all new comments; confirm the
   answer is explicit and consistent with the approved plan. Then continue the
   delivery workflow in this session from the saved continuation note.
5. If the answer is ambiguous, conflicts with the plan, or leaves a dependency
   blocked, keep the work paused and ask the tech lead for the missing decision.
   Restart the poll only after returning to the explicit blocked-wait state.
   Stop the poll as well if the issue is closed, the blocker is withdrawn,
   GitHub access fails persistently, or the user cancels the wait; report the
   resulting state without claiming the work resumed.

The poll exists only for the blocked-wait state: start it on entry to that
state and stop it before leaving that state. Never use it to monitor ordinary
In-progress work or to decide that silence means approval.

Preserve the audit trail: add a correcting follow-up when a material finding
changes, and reference the lead's answer when acting on it. Verify comments were
published. After an uncertain write, read current state before retrying to avoid
duplicate comments or mutations.

## Verify and hand over for review

1. Check every assigned acceptance criterion against actual code and permitted
   verification. Follow test ownership and repository compact gates; use
   `verification-gate` when available. Keep compiler/build/test output compact.
   In Peysaz panel, run `npm run verify:policy` and the scoped checks required by
   the assignment. Do not weaken baselines or allowlists to obtain a pass.
2. Repair failures caused by this change. Report inherited failures and environment
   limits separately, with evidence. Do not promote mocks or query fakes into
   claims about live persistence, locks, concurrency, or rendered UI behavior.
   Finish independent work if one part is blocked. Never silently reduce scope.
3. Prepare the review artifact required by the existing plan: inspectable changes
   in the assigned worktree, or a commit/branch/PR when delivery calls for one.
   Follow existing authorization for Git actions and publishing. Include only
   artifact links and identifiers that actually exist. Link PRs using `Refs #N`
   when closure is reserved for the lead; avoid automatic closing keywords.
4. Re-read the issue and latest comments. Post a review handoff mapping acceptance
   criteria to changes and evidence, listing checks and outcomes, linking the
   review artifact and related slices, and stating remaining limitations.
5. Move the actual status to **In review** only when assigned scope is complete
   and reviewable. Unfinished scope, pending breakdown/design decisions, or a
   required check still blocked keep it In progress (or an existing Blocked state
   when the repository defines one). An inherited unrelated failure can accompany
   In review only when repository/lead rules permit and evidence is disclosed.
6. Read status back and confirm the issue remains **OPEN**. In review is a handoff
   to the tech lead, who accepts and closes it. Do not choose Done, close issues,
   merge PRs, or close a parent as part of this handoff without explicit direction.
   If changes are requested, return the affected issue to In progress, apply the
   feedback, verify, comment, and return it to In review.

The final user update should include the issue/review link, verified current
status, delivered outcome, and any outstanding blocker. If GitHub is unavailable,
state precisely which comments or transitions could not be recorded and retain
the intended comment locally for a later authorized retry.

Files in this skill

  • SKILL.md16.8 KB
  • references/core.md3.2 KB
  • references/github-operations.md5.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.