Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

X Req

ASecurity

已废弃:保留旧版 x-req 的任务包规划规则与模板,供历史 task 和迁移核对使用。新需求使用 x-req2。

12 stars
0 votes
0 copies
1 views
Added 9/22/2026
developmentpythonapi

Works with

api

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add KtKID/x-dev-pipeline --skill x-req --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of X Req?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for X Req
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/ktkid-x-req-x-dev-pipeline/badge)](https://www.skillsdirectory.com/skills/ktkid-x-req-x-dev-pipeline)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: x-req
description: |
  已废弃:保留旧版 x-req 的任务包规划规则与模板,供历史 task 和迁移核对使用。新需求使用 x-req2。
---

# x-req — 风险路由规划

## 产物

新 task 需要 `README.md` 与 `dev-checklist.md`;涉及至少三个模块或用户要求图时加入 `diagram.md`。README 的 `risk: Q0|Q1|Q2|Q3` 是风险唯一真源,`验收` Requirement/Scenario 是 DoD 真源,dev-report 保存 verify 证据。

## 定级

| 等级 | 判据 | 流程 |
|---|---|---|
| Q0 | 单文件且没有行为分支变化 | lite task → x-dev → verify → 交付 |
| Q1 | 局部功能或修复,没有跨模块契约变化 | lite task → x-dev → verify → 交付 |
| Q2 | 新功能、多文件、契约或状态变化 | 一次确认 → x-dev → verify → RC |
| Q3 | 鉴权、权限、加密、不可逆写入或迁移、公开 API/协议/schema、并发、状态机、缓存一致性 | 一次确认 → x-dev → verify → R1→R2→R3 |

用户显式定级优先。Q0/Q1 直接编写 task 并在完成汇报中说明定级依据;用户可随时指定“按 Q2 走”。架构归属、状态模型或跨模块边界未闭合时转 x-spec。

## 流程

1. 定位 task:新建使用 `dev-pipeline/tasks/<name>/`;更新先读现有 README、checklist 与 dev-report,保留无关内容并写 `updated: YYYY-MM-DD <summary>`。
2. 调查用户请求、关联 spec、模块文档和代码入口,确定需求、边界类、公开契约、数据流、失败路径、验收场景和 risk。
3. Q2/Q3 依据 `templates/confirmation.md` 一次展示确认;用户修改后更新并再次确认;取消则结束。
4. 确认或 Q0/Q1 直通后,运行 `python3 tools/xdev.py scaffold <task-dir>`;涉及图时加 `--with-diagram`。
5. 依次运行 `instructions readme`、`instructions dev-checklist`、按需 `instructions diagram`;填写模板,删除 HTML 注释。
6. README 写入 risk;每个验收 Scenario 有 WHEN、THEN、`验证: auto|manual`;自动场景由后续 dev-report verify 块回指。
7. 运行 `python3 tools/xdev.py validate <task-dir>`,修复 issue 直到零 issue;检查需求覆盖、验收可判定性、架构归属和 checklist 追溯。
8. 输出 task 路径、产物、risk 依据、validate 结论和下一步 `x-dev <task-name>`。

## 内容规则

- Q0/Q1 保留核心目标与验收;Q2/Q3 还写需求要点、涉及模块、架构拆分策略和技术设计。
- checklist 使用 `# | 任务 | 涉及文件 | 依赖 | 状态 | fix` 表头与 token+emoji 状态。
- diagram 是 README 模块与边界的投影,节点名称保持双向一致。
- 历史 task 保持原状;活跃 task 使用本契约。

Attribution

KtKIDKtKID
View sourceMore from KtKID →
SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284722 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2192 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →