feat: add refined-github-projects ECC bundle#54
Conversation
…github-projects/SKILL.md)
…github-projects/SKILL.md)
…github-projects/agents/openai.yaml)
…incts/inherited/refined-github-projects-instincts.yaml)
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor auto review
Found 6 actionable issue(s) on changed lines.
Generated ECC guidance has several high-confidence factual errors that will mislead agents: both SKILL.md copies are wrapped in a markdown code fence, workflows/tests/commands don't match the repo (Vitest + GitHub Actions + pnpm scripts), and inherited instincts cite non-existent source files.
Generated automatically when this PR was submitted using Cursor CLI with --model auto.
| @@ -0,0 +1,76 @@ | |||
| ```markdown | |||
There was a problem hiding this comment.
Remove the opening ```markdown fence and the matching closing fence at the end of the file. Skill files are already Markdown; wrapping the entire body turns the instructions into a single code block for consumers.
| @@ -0,0 +1,76 @@ | |||
| ```markdown | |||
There was a problem hiding this comment.
Same issue as the Claude skill copy: delete the wrapping markdown ... fences so the skill body is real Markdown, not a fenced code block.
|
|
||
| ## Workflows | ||
|
|
||
| _No automated workflows detected in this repository._ |
There was a problem hiding this comment.
Incorrect claim. This repo has multiple GitHub Actions workflows under .github/workflows/ (e.g. ci.yml, pr.yml, coverage.yml, release.yml). Document those instead of stating no workflows were detected.
| ``` | ||
| project-list.test.ts | ||
| ``` | ||
| - The testing framework is not specified in the repository. |
There was a problem hiding this comment.
Incorrect: the repo already uses Vitest ("test": "vitest run" in package.json) with many *.test.ts(x) files under src/. Document Vitest and pnpm test rather than saying the framework is unspecified.
| | Command | Purpose | | ||
| |---------|---------| | ||
| | /new-feature | Start a new feature (use `feat` in commit messages) | | ||
| | /test | Run all test files matching `*.test.*` | |
There was a problem hiding this comment.
These slash commands are not defined in the repository. Replace /test and /lint with the real scripts (pnpm test, pnpm lint, and preferably pnpm typecheck) so agents run the correct validation commands.
|
|
||
| ## Evidence | ||
|
|
||
| - Pattern in files: src/features/create-issue.test.ts next to src/features/create-issue.ts |
There was a problem hiding this comment.
This evidence path does not exist (no src/features/create-issue.ts or create-issue.test.ts). Other instincts similarly cite missing files (ProjectManager.ts, constants.ts, api.ts). Replace with real colocated examples from src/ or remove the fabricated evidence.
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
|
|
||
| [mcp_servers.context7] | ||
| command = "npx" | ||
| args = ["-y", "@upstash/context7-mcp@latest"] |
There was a problem hiding this comment.
🔒 Agentic Security Review
Severity: HIGH
The MCP server commands are executed via npx -y with floating package resolution (including @latest), so the exact code executed at runtime can change without review.
This creates a supply-chain execution risk: a compromised upstream package release can run arbitrary code in the local agent/developer environment when MCP servers start.
Reviewed by Cursor Security Reviewer for commit 542d467. Configure here.
Summary
Auto-generated ECC bundle from repository analysis.
What This Does
Merging this PR adds repo-local ECC artifacts for both Claude Code and Codex. The generated bundle captures repository patterns, Codex baseline config, and reusable workflow scaffolds derived from git history analysis.
Analysis Scope
Files
.claude/ecc-tools.json.claude/skills/refined-github-projects/SKILL.md.agents/skills/refined-github-projects/SKILL.md.agents/skills/refined-github-projects/agents/openai.yaml.claude/identity.json.codex/config.toml.codex/AGENTS.md.codex/agents/explorer.toml.codex/agents/reviewer.toml.codex/agents/docs-researcher.toml.claude/homunculus/instincts/inherited/refined-github-projects-instincts.yamlOptional: Continuous Learning (17 instincts)
This PR also includes instincts for the continuous-learning-v2 skill. These are optional and only useful if you use that skill.
Import after merging:
Review Checklist
ECC Tools | Everything Claude Code
Summary by cubic
Adds a repo-local ECC bundle with skills, identity, and a Codex baseline to standardize patterns and enable multi‑agent workflows. Includes repo skills for Claude Code and Codex plus optional continuous‑learning instincts.
.claude/skills/refined-github-projects/SKILL.md,.agents/skills/refined-github-projects/SKILL.md, and metadata at.agents/skills/refined-github-projects/agents/openai.yaml.codex/config.tomlwithmulti_agentenabled and MCP servers@modelcontextprotocol/server-github,@upstash/context7-mcp,@modelcontextprotocol/server-memory,@playwright/mcp,@modelcontextprotocol/server-sequential-thinking, and Exa.codex/AGENTS.mdand identity at.claude/identity.json.claude/homunculus/instincts/inherited/refined-github-projects-instincts.yamlWritten for commit 542d467. Summary will update on new commits.