Skip to content
Back to skills

Obpis

ASecurity

- **Source ADR:** `docs/design/adr/foundation/ADR-0.0.29-complexity-advisor/ADR-0.0.29-complexity-advisor.md` - **Checklist Item:** #4 — "`complexity-advisor` skill (vendor-mirrored; Output Contract declared; auto-chain + ad-hoc + intrinsic-attestation guidance)"

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
code-qualitygobashgit

Works with

  • cli

Security analysis

A100/100

Pro scans all 10 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add tvproductions/gzkit --skill obpis --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Obpis?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Obpis
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/tvproductions-obpis-58769e86/badge)](https://www.skillsdirectory.com/skills/tvproductions-obpis-58769e86)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
id: OBPI-0.0.29-04-complexity-advisor-skill
parent: ADR-0.0.29
item: 4
lane: Heavy
status: Completed
---

# OBPI-0.0.29-04-complexity-advisor-skill: complexity-advisor Skill

## ADR Item

- **Source ADR:** `docs/design/adr/foundation/ADR-0.0.29-complexity-advisor/ADR-0.0.29-complexity-advisor.md`
- **Checklist Item:** #4 — "`complexity-advisor` skill (vendor-mirrored; Output Contract declared; auto-chain + ad-hoc + intrinsic-attestation guidance)"

**Status:** Draft

## Objective

Author the `complexity-advisor` skill at `.gzkit/skills/complexity-advisor/SKILL.md` and propagate it to vendor mirrors. The skill carries invocation patterns for ad-hoc preview-before-fail (OBPI-06), references the auto-chain pathway (OBPI-05), documents the two-path intrinsic-complexity attestation (OBPI-07), and declares an Output Contract aligned with the destination CLI verb's default form.

## Lane

**Heavy** — New operator-facing skill is a contract surface per `.gzkit/rules/cli.md`-equivalent rules; vendor-mirror discipline per `.gzkit/rules/skill-surface-sync.md`. Foundation-kind brief-level Gate 5 attestation.

## Allowed Paths

- `.gzkit/skills/complexity-advisor/SKILL.md`
- `.claude/skills/complexity-advisor/`, `.agents/skills/complexity-advisor/`, `.github/skills/complexity-advisor/` — vendor mirrors via `gz agent sync control-surfaces`
- `tests/skills/test_complexity_advisor.py` — REQ-derived assertions
- `docs/design/adr/foundation/ADR-0.0.29-complexity-advisor/obpis/OBPI-0.0.29-04-complexity-advisor-skill.md` — this brief's evidence section only

## Denied Paths

- `src/gzkit/commands/complexity_advise.py` — CLI is OBPI-03 (consumed, not edited)
- `src/gzkit/complexity/advisor/**` — engine/schema/intrinsic/timeout are other OBPIs
- `.gzkit/hooks/**` — auto-chain hook is OBPI-05
- Any path not listed in Allowed Paths

## Requirements (FAIL-CLOSED)

1. REQUIREMENT: `SKILL.md` carries valid frontmatter per the skill schema, including `skill-version: 0.1.0`, `gz_command: complexity advise`, `description:` triggering on operator phrases ("preview complexity advisor", "complexity diagnosis", "advisor recommendation", "what does the advisor say", "intrinsic complexity attestation").
2. REQUIREMENT: The skill body documents the three operator moments: (a) ad-hoc preview-before-fail (`gz complexity advise <path>`); (b) auto-chain context (when xenon-as-gate fails, the hook fires `gz complexity advise --auto-chain`); (c) intrinsic-attestation guidance (when to use `@intrinsic_complexity` decorator vs `--attest-intrinsic` commit-time flag).
3. REQUIREMENT: The skill body declares an Output Contract per `.gzkit/rules/tool-skill-runbook-alignment.md` § Invariant 3: the destination verb's default human-readable output is structured prose with a per-diagnosis block (metric, crossing band, archetype, doctrinal frame, proof range, recommended move). The `--json` mode emits canonical Pydantic serialization.
4. REQUIREMENT: The skill body cross-references the runbook entry under "Complexity doctrine surfaces" and the manpage at `docs/user/manpages/gz-complexity-advise.md`.
5. REQUIREMENT: The skill is operator-runnable ad-hoc; its `gz_command` field resolves to a registered CLI verb per Invariant 1 of the tool-skill-runbook-alignment rule.
6. REQUIREMENT: `uv run gz agent sync control-surfaces` propagates the skill to all three vendor mirrors with empty post-sync diff.
7. REQUIREMENT: Tests cover: SKILL.md frontmatter validates against schema; skill body declares all three operator moments; Output Contract section names the destination verb's output form; the `gz_command` target resolves to a registered verb (Invariant 1); skill body cross-references runbook + manpage; vendor-mirror copies are byte-identical after sync. Each test decorated with `@covers(REQ-0.0.29-04-NN)`.
8. REQUIREMENT: TDD discipline; tests do NOT spawn the actual advisor pipeline (mocked at the subprocess boundary).
9. REQUIREMENT: NEVER include the operator's personal email in skill body, frontmatter, or fixtures.

> STOP-on-BLOCKERS: if OBPI-03's CLI verb (`gz complexity advise`) is not registered, STOP — the skill's `gz_command` resolution fails Invariant 1.

## Discovery Checklist

**Prerequisites (check existence, STOP if missing):**

- [x] OBPI-03 CLI verb `gz complexity advise` registered and responding to `--help`
- [x] OBPI-03 manpage exists at `docs/user/manpages/gz-complexity-advise.md`
- [x] Runbook entry at `docs/user/runbook.md` § Complexity doctrine surfaces
- [x] `.gzkit/schemas/skill.schema.json` — skill frontmatter schema for validation

**Existing Code (understand current state):**

- [x] `.gzkit/skills/gz-complexity-distill/SKILL.md` — exemplar foundation-aligned skill (same cluster, shape reference)
- [x] `src/gzkit/cli/parser_artifacts.py` — verb registration surface (`advise` subverb under `complexity` parser group)
- [x] `src/gzkit/complexity/advisor/engine.py` — diagnosis engine consumed by the CLI verb

**Governance:**

- [x] Parent ADR § Decision — three-operator-moment guidance shape (ad-hoc, auto-chain, intrinsic-attestation)
- [x] `.gzkit/rules/tool-skill-runbook-alignment.md` § Invariants 1, 2, 3
- [x] `.gzkit/rules/skill-surface-sync.md` — version discipline + mirror sync protocol

## Quality Gates

### Gate 1: ADR
- [ ] Intent recorded; parent checklist item quoted

### Gate 2: TDD
- [ ] RGR cycle; tests pass with `@covers`

### Code Quality
- [ ] Lint/type clean

### Gate 3: Docs (Heavy)
- [ ] mkdocs --strict clean

### Gate 4: BDD (Heavy)
- [ ] BDD waiver registered: skill-only OBPI; CLI scenarios at OBPI-03

### Gate 5: Human (Heavy + Foundation)
- [ ] TTY + `ATTEST`

## Verification

```bash
uv run gz lint
uv run gz typecheck
uv run gz test
uv run gz validate --documents --surfaces
uv run gz agent sync control-surfaces  # post-sync diff empty
uv run gz arb step --name unittest -- uv run -m unittest tests/skills/test_complexity_advisor.py -v
```

## Acceptance Criteria

- [ ] REQ-0.0.29-04-01: Given the canonical skill, when frontmatter is parsed, then schema validates and `skill-version` is `0.1.0`.
- [ ] REQ-0.0.29-04-02: Given the skill body, when parsed, then all three operator moments (ad-hoc, auto-chain context, intrinsic-attestation guidance) are present.
- [ ] REQ-0.0.29-04-03: Given the Output Contract section, when parsed, then it names structured prose as the default form and `--json` as the machine-readable mode.
- [ ] REQ-0.0.29-04-04: Given the skill's `gz_command`, when resolved against the CLI parser, then a registered verb exists (Invariant 1).
- [ ] REQ-0.0.29-04-05: Given a clean working tree, when `uv run gz agent sync control-surfaces` runs, then the three vendor mirrors are byte-identical and the post-sync diff is empty.
- [ ] REQ-0.0.29-04-06: Given the destination verb's default output observed against a fixture, when compared to the skill's Output Contract, then the output form matches (Invariant 3).

## Completion Checklist

- [ ] Gate 1: Intent recorded
- [ ] Gate 2: RGR cycle; tests pass with `@covers`
- [ ] Code Quality: lint/type clean
- [ ] Gate 3: docs clean
- [ ] Gate 4: BDD waiver registered
- [ ] Gate 5: TTY + `ATTEST`

## Evidence

### Gate 1 (ADR)
- [ ] Intent and scope recorded

### Gate 2 (TDD — Red-Green-Refactor)
```text
# Paste RGR + unittest output
```

### Code Quality
```text
# Paste lint/typecheck output
```

### Gate 3 (Docs)
```text
# Paste mkdocs --strict output
```

### Gate 4 (BDD)
```text
# Waiver: data/behave_coverage_waivers.json — OBPI-0.0.29-04
```

### Gate 5 (Human)
```text
# Record attestation + receipt IDs
```

### Value Narrative

### Key Proof


- REQ coverage: `uv run gz covers OBPI-0.0.29-04-complexity-advisor-skill --json` → 6/6 REQs at 100% (receipt `arb-step-unittest-c8c19b232a60417489fa44632388bdd0`)
- Lint clean (receipt `arb-ruff-9d753bb760324e02acae946efc489274`)
- Typecheck clean (receipt `arb-step-typecheck-b4ac4bd3c982466baf579232bcec0549`)
- Docs clean (receipt `arb-step-mkdocs-0c49996846c648dc8d68002b33569b35`)

### Implementation Summary


- Authored `.gzkit/skills/complexity-advisor/SKILL.md` (v0.1.0) with frontmatter (`gz_command: complexity advise`, trigger phrases, active lifecycle) and body documenting three operator moments (ad-hoc preview-before-fail, auto-chain context, intrinsic-complexity attestation), timeout/failure handling, and Output Contract (structured prose default, `--json` machine-readable)
- Created `tests/skills/test_complexity_advisor.py` with 17 tests across 7 classes, covering REQ-0.0.29-04-01 through REQ-0.0.29-04-06 via `@covers` decorators
- Propagated to 3 vendor mirrors via `gz agent sync control-surfaces` with byte-identical parity

### Closing Argument

## Tracked Defects

_No defects tracked._

## Human Attestation

- Attestor: `g0`
- Attestation: attest completed — complexity-advisor skill (v0.1.0) authored at .gzkit/skills/complexity-advisor/SKILL.md with three operator moments (ad-hoc, auto-chain, intrinsic-attestation), Output Contract (structured prose + --json), cross-references to runbook + manpage; 17 tests across 7 classes covering 6/6 REQs at 100%; vendor mirrors byte-identical after sync (lint: arb-ruff-9d753bb760324e02acae946efc489274, typecheck: arb-step-typecheck-b4ac4bd3c982466baf579232bcec0549, tests: arb-step-unittest-c8c19b232a60417489fa44632388bdd0, docs: arb-step-mkdocs-0c49996846c648dc8d68002b33569b35)
- Date: 2026-05-07

---

**Brief Status:** Completed

**Date Completed:** 2026-05-07

**Evidence Hash:** -

Files in this skill

  • OBPI-0.0.29-01-advisor-diagnosis-schema.md14 KB
  • OBPI-0.0.29-02-diagnosis-engine.md16.3 KB
  • OBPI-0.0.29-03-complexity-advise-cli.md15 KB
  • OBPI-0.0.29-04-complexity-advisor-skill.md9.3 KB
  • OBPI-0.0.29-05-auto-chain-hook.md12.7 KB
  • OBPI-0.0.29-06-ad-hoc-path.md10.2 KB
  • OBPI-0.0.29-07-intrinsic-complexity-attestation.md13 KB
  • OBPI-0.0.29-08-verdict-proof-binding.md14.3 KB
  • OBPI-0.0.29-09-advisor-timeout-fallback.md10.2 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in code-quality →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.