Skip to content
Back to skills

Engineering

ASecurity

Consolidated engineering domain skill: senior-engineer code review, architecture analysis, systematic debugging, implementation planning, and documentation generation. Use when: "review this code / file / diff" (quality, patterns, maintainability; --focus, --persona, --scenarios); "review the architecture of X" / "evaluate component boundaries, coupling, or layer violations" (--scope module|service|system); "debug this error / bug / unexpected behavior" (hypothesis-driven root cause, reprodu...

  • 9 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added October 18, 2026
developmentpythongoreacttestingdebugginggitapidatabasefrontendbackend

Works with

  • claude code
  • api

Security analysis

A92/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro scans all 20 files and shows the line behind each finding

Scanned October 18, 2026

npx -y skills add mikeparcewski/wicked-garden --skill engineering --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Engineering?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Engineering
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/mikeparcewski-engineering/badge)](https://www.skillsdirectory.com/skills/mikeparcewski-engineering)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: wicked-garden-engineering
description: |
  Consolidated engineering domain skill: senior-engineer code review, architecture
  analysis, systematic debugging, implementation planning, and documentation
  generation.

  Use when: "review this code / file / diff" (quality, patterns, maintainability;
  --focus, --persona, --scenarios);
  "review the architecture of X" / "evaluate component boundaries, coupling, or
  layer violations" (--scope module|service|system); "debug this error / bug /
  unexpected behavior" (hypothesis-driven root cause, reproduction, fix,
  prevention); "plan this change" / "implementation plan with file changes, risks
  and tests before writing code";
  "generate API docs / README / guide / inline comments" (--type
  api|readme|guide|inline) or "docs drifted from code".

  NOT for reviewing an AI agent system (agentic domain review), a UI (product
  ux-review), or a binding go/no-go verdict (archetype review); NOT for
  greenfield system design (the architecture module or the
  wicked-garden-engineering-solution-architect worker).
metadata:
  role: router
  phases: "design,build,review"
  archetypes: "*"
---

# Engineering

Senior engineering guidance on code quality, architecture, and implementation. The five actions below run
**inline** (no dispatch); genuinely structural, migration, or API-reference work hands off to the workers listed at the end.

## Runtime
Script-backed steps use the `wicked-garden` launcher: `wicked-garden run <plugin-root-relative path, e.g. scripts/…> [args]`. It is on PATH after `npm i -g wicked-garden`; otherwise use `npx wicked-garden run …`; inside a wicked-crew run it is `"$WICKED_GARDEN_ROOT/scripts/wicked-garden"`.
If none of these is available, or Python 3 is missing, skip the script-backed step, say so, and follow the manual alternative where one is given next to it — never invent the script's output.
Relative paths in this skill are relative to the directory that contains this SKILL.md.

## Routing

| Ask | Action |
|-----|--------|
| Code-level quality review of files or a diff | § review |
| Component/system-level architecture review | § arch |
| Bug / error / unexpected-behavior diagnosis | § debug |
| Implementation plan before writing code | § plan |
| Generate or refresh documentation | § docs |
| Multi-file mechanical change (add-field/rename/remove) | [patch](patch/SKILL.md) |

**Review disambiguation**: this skill reviews **source code**. For an AI agent
system use `agentic` review, for a UI use product `ux-review`, and for a binding
go/no-go verdict use `archetype` review (see `docs/domains.md` → "review appears
in three domains"). `arch` is component/system-level review; `review` is
code-level; greenfield design is the [architecture module](architecture/SKILL.md).

## review — senior-engineer code review

1. Parse scope (path or git-diff target), `--focus`, `--persona`, and `--scenarios`.
2. Read `refs/review.md` (relative to this skill's base directory) — R1–R6 Bulletproof Coding
   Standards, T1–T6 Bulletproof Testing Standards, agent overstepping checklist, focus lane
   definitions, persona routing instructions, wicked-scenarios format, and output template.
3. **Persona branch** (only if `--persona <name>` present): resolve the persona via
   `wicked-garden run scripts/persona/registry.py --get {name} --json`. If found, apply the review through that
   persona's frame. If not found, warn and fall through.
4. Read the target file(s) / diff. Apply R1–R6 to all code; add T1–T6 when `--focus tests` or
   reviewing test files. If `--focus` given, deepen that lane. Flag agent overstepping (scope creep,
   commented-out code, over-engineering) with `file:line` citations. Flag every piece of custom code
   that duplicates a built-in of the chosen framework or library: cite the code and the built-in, and
   judge the author's stated reason (`refs/review.md`, "Duplicates of a built-in").
5. Emit the standard Engineering Review output (Strengths, Issues table with rule + location,
   Architecture Notes, Maintainability Concerns, Agent Overstepping, Recommendations).
   If `--scenarios`, append wicked-scenarios blocks for each Critical/High finding.

## arch — architecture analysis

Use `arch` for component/system-level review; use `review` for code-level review.

1. Parse `[target]` and `--scope` (module | service | system; infer if absent from directory depth
   and file count).
2. Read `refs/arch.md` — rubric, checklists, output
   formats, and architecture principles for both module/service and system scope.
3. Map the directory layout, entry points, key dependencies, and data flow of the target.
4. Apply the scope-appropriate checklist from the rubric directly. Flag unauthorized architectural
   changes or scope creep when reviewing a diff.
5. Emit the scope-appropriate output format (strengths, concerns table, recommendations,
   trade-off table, ADR candidates for system scope).

For genuinely structural greenfield design, hand off to
`wicked-garden-engineering-solution-architect`.

## debug — systematic debugging session

1. Parse the error message, symptom, or issue description.
2. Run the hypothesis loop inline: gather context, form a hypothesis, test it, document the
   root cause — the systematic method on every seat (`refs/debug.md` carries the rubric).
3. Read `refs/debug.md` for garden-specific heuristics:
   check the wicked-bus first, loom/vault availability for gate failures, cross-platform hook issues,
   and the standard debug output format.
4. Apply the six-step process. Read relevant files at error locations, search for related patterns,
   check logs if available.
5. Emit the standard Debug Analysis output format (Symptom, Root Cause with confidence, Evidence,
   Reproduction Steps, Recommended Fix with rationale, Verification, Prevention).
6. If the user approves the fix, implement it, add a regression test, and verify resolution.

Patterns and deeper process live in the [debugging module](debugging/SKILL.md).

## plan — implementation planning

Analyze a change request against the current codebase and produce a detailed implementation plan
with specific file changes, risk assessment, and test recommendations. **Distinct from the patch
module's `patch-plan`** (propagation preview for mechanical patches — see
[patch/SKILL.md](patch/SKILL.md)); this `plan` produces a human implementation plan.

1. Parse the change request: identify goal, scope, and constraints. Ask a clarifying question if
   the request is too vague to scope (e.g. no target file or system identified).
2. Read `refs/plan.md` — exploration checklist,
   risk assessment checklist, plan output format, and security/performance heuristics.
3. Explore the affected code: entry points, key files, callers, existing patterns, test coverage.
   Use the `wicked-garden-search` skill's `blast-radius` action on `{symbol}` for impact analysis.
   Check what the chosen framework or library already provides for the job, at the version the repo
   pins. The user and the steering policies choose the stack; the plan works inside that choice and
   does not swap it out.
4. Apply the risk assessment checklist (breaking changes, performance, security, data integrity,
   test gaps, deployment coordination).
5. Emit the Implementation Plan output format: Summary, Scope (in/out), Built-ins Checked,
   Changes Required per file, Risk Assessment table, Test Plan, Rollout Considerations, Open
   Questions. Any custom code that duplicates a built-in states why the built-in does not fit.
6. Present the plan and ask: "Ready to proceed with implementation, or would you like to adjust
   the approach?" Do not write any code until approved.

## docs — documentation generation

1. Parse `<file or component>` and `--type` (api | readme | guide | inline). Infer if absent:
   `.ts/.py/.go` → api or inline; top-level directory → readme; workflow request → guide.
2. Read `refs/docs.md` — type-routing table,
   pre-generation checklist, API/README/guide/inline checklists, OpenAPI template, and quality
   standards.
3. Read the source code: public interfaces, function signatures, types, error conditions, and
   existing docs (check for drift from implementation).
4. Apply the type-appropriate checklist and generate the documentation inline following the
   output template in the rubric. API/reference docs hand off to
   `wicked-garden-engineering-api-documentarian`.
5. Present the documentation for user review before writing to file. When writing: API docs →
   `docs/api/`; READMEs → component root; guides → `docs/guides/`; inline → edit in-file with your file-edit tool.

Audit (coverage metrics) and sync (stale-docs detection) modes live in the
[docs module](docs/SKILL.md).

## Knowledge modules

[architecture](architecture/SKILL.md) · [backend](backend/SKILL.md) ·
[frontend](frontend/SKILL.md) · [integration](integration/SKILL.md) ·
[system-design](system-design/SKILL.md) · [debugging](debugging/SKILL.md) ·
[docs](docs/SKILL.md) · [large-scale-migration](large-scale-migration/SKILL.md) ·
[patch](patch/SKILL.md) · [unit-test-quality](unit-test-quality/SKILL.md)

- [refs/conformance.md](refs/conformance.md) — pattern-conformance review: load the applicable Pattern rules,
  judge the artifact semantically per rule, emit `CONFORMANT` / `DRIFT` / `VIOLATION` (report only, never gate).

## Workers

| Skill | Hand off for |
|-------|-------------|
| `wicked-garden-engineering-solution-architect` | System design, structural trade-offs, greenfield architecture, ADRs |
| `wicked-garden-engineering-migration-engineer` | Production schema/data migrations, expand-contract, deprecation paths |
| `wicked-garden-engineering-api-documentarian` | OpenAPI specs, endpoint reference docs |

**Hand-off** — open the worker skill by name with the ask as the argument; on Claude Code this is the Skill tool, on any other seat open the named skill from your catalog and run it inline, keeping its output separate from yours, then continue here.

Frontend (React/CSS/browser), backend (APIs/databases/server-side), and debugging
(error investigation, root-cause analysis) are handled **inline** by this skill —
apply the relevant checklist from `refs/`.

## Key principles

- **Code quality**: clear naming and organization, DRY, SOLID, consistent style.
- **Architecture**: design patterns, separation of concerns, component boundaries,
  dependency management.
- **Maintainability**: easy to understand, modify, and test; well-documented;
  deliberate error handling.
- **Performance**: efficient algorithms and data structures, resource management,
  caching strategies.

## Review process

Use comprehensive checklists covering structure (patterns, abstractions,
dependencies), quality (naming, duplication, style), error handling (recovery,
messages), maintainability (clarity, configuration), performance (queries, data
structures), and **agent overstepping** (unnecessary changes, commented-out code,
scope creep). See [refs/engineering-checklists.md](refs/engineering-checklists.md)
for detailed review checklists and severity guidelines.

## Output formats

Structured guidance for implementation planning (approach + steps) and code
reviews (strengths, issues, recommendations). See
[refs/engineering-templates.md](refs/engineering-templates.md) for output
templates and focus areas.

## Integration with wicked-crew

Engaged during the **build phase** (implementation guidance and pattern
recommendations), the **review phase** (code quality and architecture review),
and **error recovery** (when issues are encountered during development).

## Notes

- Always explain the "why" behind recommendations.
- Be constructive, not critical.
- Offer alternatives with tradeoffs.
- Encourage questions and discussion.

Files in this skill

  • SKILL.md11.6 KB
  • architecture/SKILL.md4.7 KB
  • architecture/refs/adr-template.md4.4 KB
  • architecture/refs/architecture-template-deployment.md4.3 KB
  • architecture/refs/architecture-template-design.md5.9 KB
  • architecture/refs/examples-ecommerce-analytics.md6.9 KB
  • architecture/refs/examples-saas-trading.md6.5 KB
  • architecture/refs/patterns-advanced.md8.1 KB
  • architecture/refs/patterns-structural.md9 KB
  • backend/SKILL.md2.7 KB
  • backend/refs/checklists.md3.3 KB
  • backend/refs/patterns.md4.1 KB
  • debugging/SKILL.md2.9 KB
  • debugging/refs/patterns.md5.1 KB
  • debugging/refs/process.md3.9 KB
  • docs/SKILL.md3 KB
  • frontend/SKILL.md2.4 KB
  • frontend/refs/checklists.md2.1 KB
  • frontend/refs/patterns.md2.9 KB
  • integration/SKILL.md5.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.