Skip to content
Back to skills

Mcaf

ASecurity

Adopt MCAF governance in a .NET repository with the right AGENTS.md layout, repo-native docs, skill installation, verification rules, and non-trivial task workflow. USE FOR: bootstrapping MCAF in a new or existing repository that also contains .NET work; updating root or project-local AGENTS.md files to follow a durable repo workflow;. DO NOT USE FOR: unrelated stacks; generic tasks that do not need this specific guidance. INVOKES: inspect the repository context, edit targeted files, and run ...

  • 485 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added May 27, 2026
developmentgotestingsecuritydocumentation

Security analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned May 27, 2026

npx -y skills add managedcode/dotnet-skills --skill mcaf --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Mcaf?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Mcaf
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/managedcode-mcaf/badge)](https://www.skillsdirectory.com/skills/managedcode-mcaf)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: mcaf
description: "Adopt MCAF governance in a .NET repository with the right AGENTS.md layout, repo-native docs, skill installation, verification rules, and non-trivial task workflow. USE FOR: bootstrapping MCAF in a new or existing repository that also contains .NET work; updating root or project-local AGENTS.md files to follow a durable repo workflow;. DO NOT USE FOR: unrelated stacks; generic tasks that do not need this specific guidance. INVOKES: inspect the repository context, edit targeted files, and run relevant build, test, lint, or validation commands when changes are made."
compatibility: "Best for repositories that want MCAF governance and also use dotnet-skills for actual .NET implementation work."
---

# MCAF Adoption

## Trigger On

- bootstrapping MCAF in a new or existing repository that also contains `.NET` work
- updating root or project-local `AGENTS.md` files to follow a durable repo workflow
- deciding which MCAF governance skills and implementation-focused catalog skills to install together
- organizing repo-native docs for architecture, features, ADRs, testing, development, and operations

## Workflow

1. Start from the canonical bootstrap surface:
   - tutorial: `https://mcaf.managed-code.com/tutorial`
   - concepts: `https://mcaf.managed-code.com/`
   - public MCAF skills: `https://mcaf.managed-code.com/skills`
2. Place root `AGENTS.md` at the repository or solution root.
3. Add project-local `AGENTS.md` only when the solution has multiple projects with genuinely different local rules.
4. Install MCAF governance skills (`mcaf-*`) for process areas and implementation-focused catalog skills for framework work. Check [references/skill-map.md](references/skill-map.md) for overlap before adding duplicate surfaces.
5. Route to the narrowest MCAF skill once the governance concern is clear:

   | Concern | Skill |
   |---------|-------|
   | Delivery workflow and feedback loops | `mcaf-agile-delivery` |
   | Developer onboarding and local inner loop | `mcaf-devex` |
   | Durable docs structure and source-of-truth placement | `mcaf-documentation` |
   | Executable feature behaviour docs | `mcaf-feature-spec` |
   | Human review for large AI-generated drops | `mcaf-human-review-planning` |
   | ML/AI product delivery process | `mcaf-ml-ai-delivery` |
   | Explicit quality attributes and trade-offs | `mcaf-nfr` |
   | Branch, merge, and release hygiene | `mcaf-source-control` |
   | Design-system, accessibility, front-end direction | `mcaf-ui-ux` |

6. Scaffold repo-native documentation:
   ```
   docs/
   ├── Architecture.md
   ├── Features/
   ├── ADR/
   ├── Testing/
   ├── Development/
   └── Operations/
   ```
7. Encode the non-trivial task flow in `AGENTS.md`: `<slug>.brainstorm.md` then `<slug>.plan.md` then implementation and validation.
8. Treat verification as part of done: tests, analyzers, formatters, coverage, and any architecture or security gates the repo configured.

```mermaid
flowchart LR
  A["Adopt MCAF"] --> B["Root AGENTS.md"]
  B --> C{"Multi-project?"}
  C -->|Yes| D["Project-local AGENTS.md"]
  C -->|No| E["Root policy only"]
  B --> F["Install mcaf-* governance skills"]
  B --> G["Install implementation-focused skills"]
  D --> H["Document boundaries and commands"]
  E --> H
  F --> I["Repo-native docs scaffolds"]
  G --> J[".NET implementation guidance"]
  H --> K["Run full quality pass"]
  I --> K
  J --> K
```

## Deliver

- repository-ready MCAF adoption with clear root and local `AGENTS.md` responsibilities
- correct split between `mcaf-*` governance and implementation-focused skills
- repo-native docs and verification expectations instead of chat-only instructions

## Validate

- root `AGENTS.md` exists at the repository or solution root
- project-local `AGENTS.md` files exist only where genuinely needed
- repo documents exact build, test, format, analyze, and coverage commands
- durable docs exist for architecture and behavior, not only inline comments
- non-trivial work follows the brainstorm-to-plan flow before implementation
- the full quality pass is part of done, not only a narrow happy-path test run

## References

- [references/adoption.md](references/adoption.md) - canonical MCAF entry points, bootstrap rules, and the local-mirror boundary between governance and implementation skills
- [references/skill-map.md](references/skill-map.md) - MCAF catalog map with overlap-vs-new split for precise routing

Files in this skill

  • SKILL.md4.4 KB
  • manifest.json47 B
  • references/adoption.md4.6 KB
  • references/skill-map.md6.4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.