Skip to content
Back to skills

Agent Workflow

ASecurity

Use for implementation plans or repository changes, explicit Agent Workflow requests, and existing workflow task actions. Skip standalone read-only review, explanation, diagnosis, comparison, or inspection.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 23, 2026
ai-agents

Security analysis

A100/100

Pro scans all 20 files and shows the line behind each finding

Scanned September 23, 2026

npx -y skills add rore/Pallium --skill agent-workflow --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Agent Workflow?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Agent Workflow
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/rore-agent-workflow/badge)](https://www.skillsdirectory.com/skills/rore-agent-workflow)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: agent-workflow
description: Use for implementation plans or repository changes, explicit Agent Workflow requests, and existing workflow task actions. Skip standalone read-only review, explanation, diagnosis, comparison, or inspection.
---

# agent-workflow

Drive engineering tasks through a small set of checkpoints. The harness records what you do in a structured Work Record so the next agent or reviewer can pick up where you stopped. Plan quality, discovery sufficiency, implementation correctness, evidence adequacy — those stay reviewer judgments; you produce the artifacts that make them possible.

## Pick a mode

1. **`agent-workflow.yaml` exists in the repo root** → read [`operating-mode.md`](operating-mode.md). Everyday work.
2. **User asked you to set up `agent-workflow` on this repo** → read [`bootstrap-mode.md`](bootstrap-mode.md). One-shot install.
3. **Neither** → this skill is not relevant.

Read only the file for the mode that applies.

## Principles

- **Gate request scope, then applicability.** Standalone read-only analysis stays out; implementation plans, repository changes, explicit use, and existing-task actions enter. For in-scope work, only a whole-change applicability exemption skips the Work Record.
- **Shape is derived from `(Risk, Complexity)`.** `(Routine, Simple)` → compact. Anything else → expanded. Checker enforces via `workrecord.shape_matches_classification`.
- **Stay within recorded scope.** Material scope expansion returns the task to planning.
- **Update State at transitions.** `Ready to implement` → `Ready for review` only when verification passes.
- **Pause on assumption failure.** Stop and update the assumption + affected fields. Do not continue under stale assumptions.
- **Marker block is the structured surface.** Prose around it is human notes. Don't put structured state outside the markers; don't put free prose inside them.
- **Report upstream defects.** If product/skill behavior fails, contradicts guidance, or forces a consequential guess, load [`templates/skill-feedback.md`](templates/skill-feedback.md). Review the Result is the final catch.

## Decision priority

When ambiguous: repo's `agent-workflow.yaml` → repo's `AGENTS.md`/`CLAUDE.md` → mode-specific skill file → these principles → ask the developer. Do not invent rules the config does not state.

## Resources (load on demand)

- `operating-mode.md` — when entering operating mode.
- `bootstrap-mode.md` — when entering bootstrap mode.
- `templates/checkpoints/*.md` — per-checkpoint, load only when entering that checkpoint.
- `templates/skill-feedback.md` — load only when a trigger from the Skill-feedback check fired.
- The repo's `agent-workflow.yaml` — once on pickup, to learn the configured `taskPath`.

Files in this skill

  • SKILL.md2.7 KB
  • agent-redline/SKILL.md3 KB
  • agent-redline/assets/schema/agent-policy.schema.json14.2 KB
  • agent-redline/assets/schema/boundary-violations.schema.json2.2 KB
  • agent-redline/assets/schema/suppressions.schema.json2 KB
  • agent-redline/assets/templates/AGENTS.md.template972 B
  • agent-redline/assets/templates/agent-policy.yaml.template3.9 KB
  • agent-redline/assets/templates/pr-template.md401 B
  • agent-redline/assets/templates/pre-push-check.sh4.9 KB
  • agent-redline/assets/templates/suppressions.yaml600 B
  • agent-redline/bootstrap-mode.md21.2 KB
  • agent-redline/extensions/jvm-archunit/README.md3.6 KB
  • agent-redline/extensions/jvm-archunit/adapter.yaml1.1 KB
  • agent-redline/extensions/jvm-archunit/operating.md2.3 KB
  • agent-redline/extensions/jvm-archunit/profile.md18 KB
  • agent-redline/extensions/jvm-archunit/scaffold.md12.8 KB
  • agent-redline/extensions/jvm-archunit/suppressions.yaml394 B
  • agent-redline/extensions/python/README.md3.4 KB
  • agent-redline/extensions/python/adapter.yaml1 KB
  • agent-redline/extensions/python/operating.md2.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…