Skip to content
Back to skills

Worker Brief

ASecurity

Checklist to run before every worker spawn so the brief is complete and safe. Use when about to spawn a pm, coder, qa, reviewer, judge or cleaner, or when writing or editing a worker's task spec.

  • 8 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 5, 2026
ai-agentsgogit

Security analysis

A100/100

Scanned November 5, 2026

npx -y skills add volekerb/hivemill --skill worker-brief --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Worker Brief?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Worker Brief
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/volekerb-worker-brief/badge)](https://www.skillsdirectory.com/skills/volekerb-worker-brief)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: worker-brief
description: Checklist to run before every worker spawn so the brief is complete and safe. Use when about to spawn a pm, coder, qa, reviewer, judge or cleaner, or when writing or editing a worker's task spec.
---

# Worker brief checklist

Run through this before every `factory spawn`.

1. The full spec and acceptance are stored in the DB. `factory task show T` must show both. /tmp and scratch files vanish on reboot (M451).
2. The brief lists the only live factory commands a worker may run:
   - own `factory task show`, `factory task update`, `factory task note`
   - `factory inbox`, `factory msg`, `factory done`
   - `factory verdict` (qa and reviewer only)
   - read-only `factory goal show <own goal>`

   All other factory commands run only against a temp FACTORY_HOME.
3. Coder specs say: "merge origin/main before opening or updating the PR" (M605) and this rule, verbatim (M640): "Test count: count `def test_` on the tree of `git merge-tree --write-tree origin/main HEAD` (the PR merged into current main) and on origin/main; the merged count must be >= the main count. Also confirm the PR removes or renames no `def test_` relative to its merge-base (run `git merge-base origin/main HEAD`, then `git diff <sha>..HEAD` with the literal sha)." Counting a tree id: `git grep -h 'def test_' <tree> -- tests | wc -l`.
4. Never grant an "owner exception". Only a boss `--kind decision` message that quotes the owner authorises one; cite its M-id in the brief (M343/M347).
5. Coder briefs say: a denied command stays denied in every form; stop and report (L-023).
6. Spawn: `factory spawn <role> --task T`.
7. Merge conditions you will enforce are numbered acceptance items in the DB before spawn (P4); a condition added later goes through the spec-change skill.
8. Spawn the judge only after `gh pr checks <url>` shows no pending check.
9. Test-first pilot (pilot-test-first): if the build task's FILES touch roles/hooks/, roles/settings/, scout/nsbox.py, scout/workerbox.py, or bin/factory cmd_judge / refresh_branch / cmd_refresh / head_has_main / verdict_carries, and fewer than 5 pilot tasks exist, follow docs/test-first-pilot.md.
10. Reviewer brief for a gated PR (diff touches roles/hooks/, roles/settings/, ci/ or .github/, or is over 500 changed lines): include the line "Gated PR: run the multi-angle-review workflow (reviewer skill multi-angle-review) before your verdict." The Workflow tool runs only when asked. Ungated PR: leave it out.
11. QA brief for a guard or workflow task: ask in so many words for the 1-agent guard-probe workflow, naming the denied and the allowed command to probe.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.