Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Feature Execution

ASecurity

Implementing an authorized plan through coherent, verifiable resources: selecting ready work, implementing within accepted scope, running relevant checks and reading their results, and reconciling deviations and blockers. Use when implementation is starting, too many resources are partly finished, code diverges from the plan, a blocked resource has stalled unrelated work, or compilation is being treated as completion. Does not select repository gate policy (quality-gates), own test-design met...

2 stars
0 votes
0 copies
0 views
Added 9/19/2026
developmentjavatestingapi

Works with

api

Security Analysis

A100/100

Scanned 9/19/2026

Install to Claude Code

$npx -y skills add robsonkades/agent-skills --skill feature-execution --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Feature Execution?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Feature Execution
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/robsonkades-feature-execution/badge)](https://www.skillsdirectory.com/skills/robsonkades-feature-execution)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: feature-execution
description: >
  Implementing an authorized plan through coherent, verifiable resources: selecting ready work,
  implementing within accepted scope, running relevant checks and reading their results, and
  reconciling deviations and blockers. Use when implementation is starting, too many resources are
  partly finished, code diverges from the plan, a blocked resource has stalled unrelated work, or
  compilation is being treated as completion. Does not select repository gate policy (quality-gates),
  own test-design methods (tdd; java-testing-strategy for Java), maintain the status format
  (feature-progress-tracking), or define reporting discipline (coding-agent-discipline).
---

# Feature Execution

## Purpose

Two failure shapes, and both are about the unit of work.

Implementing everything at once produces a large diff in which nothing is finished, no part is
validated, and a blocker anywhere stops all of it. Implementing without closing the loop
produces resources that are "done" in the sense that code was written for them, which is
discovered to be a different thing at review.

The unit is a coherent, verifiable resource or tightly coupled group. Limit active work per
owner; independent resources can proceed in parallel when authorized, with explicit file
ownership and integration checks. A blocked resource does not lock the entire feature.

## The loop

```text
Pick the next resource from the execution order
        |
Mark IN_PROGRESS, record the start
        |
Implement its coherent scope and necessary dependencies
        |
Run its validation and read the output
        |
   +----+----+
Passed     Failed or blocked
   |          |
Mark DONE   Fix, or mark BLOCKED with the reason
with the      and the decision it needs
validation    |
   |          |
Update progress and the log
        |
Next resource
```

Two rules keep the loop honest, and they are the ones that get skipped under pressure: **a
resource is not DONE until its required validation has passed and been read**, and **progress
is durable at material transitions and handoffs**. Use the existing tracking convention;
Light/Inline work need not create an artifact solely to document sub-minute steps.

## Workflow

1. **Resume the current authorized plan.** Inspect its scope/acceptance revision, resource IDs,
   recorded progress and evidence. Reuse existing implementation authorization and delegation;
   an accepted definition or request to review a plan alone does not request implementation.
   Take the next ready resource, checking its implementation prerequisites and ownership.
   Unforced ordering means a blocked resource does not stop unrelated authorized work.
2. **Read the code you are about to change**, including its callers and its tests, before
   editing. Inspect repository instructions, the working tree and the actual language, build,
   dependency and runtime settings; preserve other contributors' changes and compatibility.
   The plan named files; it did not read them for you, and does not authorize a toolchain upgrade.
3. **Implement to the project's conventions** as the context report established them, reusing
   what exists rather than adding a parallel mechanism.
4. **Validate at the level the resource warrants** (`references/validation-by-resource.md`).
   Reuse meaningful existing checks; do not add tests merely to mirror a reversible edit.
   If planned validation is missing or inadequate, define the needed evidence before completion.
   Use the project's test strategy and tools; route to `java-testing-strategy` for Java-specific
   choices. Test methods and gate policies guide implementation without changing its target stack.
5. **Read the output.** A suite can exit successfully while running zero relevant tests.
6. **Record the outcome** with what actually ran, then move on.
7. **When implementation contradicts the plan or a decision**, classify the affected work
   (`references/deviation-and-blockers.md`), reconcile the plan and continue independent work.

## Decision rules

```text
IF a resource is larger than it looked and splits naturally
THEN split it with dependency and acceptance traceability; group tightly coupled edits when
     artificial separation would leave neither resource independently verifiable.
     Preserve existing IDs/history, record the split mapping, and reassess affected evidence.

IF implementing RES-n reveals that RES-m is unnecessary
THEN show where its accepted obligation remains covered, or cite the authorized revision
     removing that obligation, before marking CANCELLED. Do not drop promised work by relabeling it.

IF implementation needs a decision that was never taken
THEN check existing user authorization and delegated authority; take routine in-scope choices.
     Record unresolved material choices as proposals and block only dependent actions.

IF a test that already existed fails
THEN investigate whether the failure is caused by this change, an intended contract change,
     the environment or a pre-existing problem. Do not assume causation or silence failure.
     Update assertions only for justified changed requirements, preserving relevant coverage.

IF the work touches a file no resource names
THEN either the impact map missed it — amend it — or it is scope creep. Decide which,
     out loud.

IF a deviation changes BAC-*, CT-*, TC-*, or an accepted baseline
THEN distinguish a bug from evidence requiring a changed premise. Fix the bug against the
     accepted contract; for a necessary baseline revision, pause affected decision-dependent
     actions, record the impact and return to its accountable phase using existing authority.

IF a resource cannot be validated as planned
THEN record the missing evidence and use an alternative only if it covers the required
     acceptance contract. A material unverified property prevents DONE; a weaker check is
     useful partial evidence, not a substitute for the missing guarantee.

IF the session is ending mid-resource
THEN preserve its true IN_PROGRESS or BLOCKED state, with exactly what remains and what is next.
```

## Constraints

- **Bound work in progress and preserve ownership.** One coherent active unit per owner is
  the default. Parallel work needs explicit dependencies, shared-file coordination and
  integration validation; never revert another owner's edits to make a local check pass.
- **Keep the diff to the resource.** Improvements to code you passed through are findings, not
  edits — the scope rules do not relax during implementation.
- **Preserve behaviour that is not in scope.** A refactor that is necessary to implement the
  resource is part of it and is said so; a refactor that is merely improving is not.
- **Never weaken a check to make it pass.** Deleting, disabling or loosening a test to get to
  DONE converts a real signal into a false one, and the next person inherits both.
- **Report what ran.** Capture command, relevant counts/results, revision/environment and
  limitations. Summarize output; do not paste secrets or imply skipped tests executed.
- **Honor the requested delivery boundary.** Local implementation and passing checks do not
  themselves authorize publication, deployment or a production migration.

## Output

Per resource, one entry. This hypothetical Java example illustrates the evidence record;
use the actual project's paths, runner, revisions and observed results:

```text
RES-04 Dispatch status endpoint            DONE
      Traces to   BAC-03, TC-04, CT-02 at their accepted revisions
      Files       api/DispatchStatusController.java (new)
                  api/DispatchStatusResponse.java (new)
                  api/ApiRoutes.java:31 (modified)
      Evidence    EV-14 ./mvnw test -Dtest=DispatchStatusControllerTest
                  4 tests, 4 passed — covers found, not-found, and unauthorised
      Checked     <code revision and relevant local diff; actual JDK/test environment>
      Notes       Reused the existing ProblemDetail error shape (11 controllers,
                  no counter-example), so no new error type was introduced.
```

At the end of a run: what was completed, what is blocked and on what, what changed in the plan,
and what was not verified. Recheck affected resources when later edits invalidate their evidence;
resource completion does not by itself establish feature completion or release readiness.

Attribution

robsonkadesrobsonkades
View sourceMore from robsonkades →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

281612 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2132 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →