AGENT SKILL

edit-spec

Edit a vigiles .spec.ts to change a compiled instruction file (CLAUDE.md / AGENTS.md) — add, modify, or remove a rule, section, command, or file pointer (including a request to add a "key file" — the keyFiles field is deprecated). Use whenever you need to change a CLAUDE.md/AGENTS.md that carries a vigiles hash (edit the spec, never the artifact), including adding a new enforce()/check()/guidance() rule.

使用场景测试与质量
License 许可
MIT
所属仓库
zernie/vigiles
最近更新
2026-11-02
Stars
★ 15
Forks
4

01 前言 Front Matter

name
edit-spec
description
Edit a vigiles .spec.ts to change a compiled instruction file (CLAUDE.md / AGENTS.md) — add, modify, or remove a rule, section, command, or file pointer (including a request to add a "key file" — the keyFiles field is deprecated). Use whenever you need to change a CLAUDE.md/AGENTS.md that carries a vigiles hash (edit the spec, never the artifact), including adding a new enforce()/check()/guidance() rule.
allowed-tools
Read, Edit, Write, Glob, Grep, Bash
argument-hint
<what to change — e.g., "add a rule about error handling" or "update the testing section">

03 SKILL.md 正文

Edit a .spec.ts file to update the project's instruction files. The spec is the source of truth — CLAUDE.md and AGENTS.md are compiled build artifacts that must not be edited directly.

Arguments

$ARGUMENTS — What the user wants to change. Examples:

  • "add a rule about always using the custom logger"
  • "update the architecture section"
  • "point the auth rule at src/services/auth.ts"
  • "add npm run lint to commands"
  • "change the testing guidance"

Instructions

Step 1: Find the Spec

Look for spec files in the repo root:

  • CLAUDE.md.spec.ts — source for CLAUDE.md
  • AGENTS.md.spec.ts — source for AGENTS.md
  • Any *.spec.ts matching instruction files

If no spec exists: if there's a hand-written CLAUDE.md, suggest the adopt-spec skill; otherwise suggest npx vigiles init to scaffold one.

Step 2: Read and Understand the Spec

Read the spec file. It's a TypeScript file that exports a claude() call with these fields:

import { claude, enforce, guidance, check, every } from "vigiles/spec";

export default claude({
  // Optional: output target (defaults to "CLAUDE.md")
  target: "CLAUDE.md",
  // or multi-target:
  // target: ["CLAUDE.md", "AGENTS.md"],

  // Prose sections — become ## headings in compiled output
  sections: {
    positioning: "What this project does...",
    architecture: "How the codebase is structured...",
  },

  // (No `keyFiles` — deprecated; see "A pointer to a file" in Step 3.)

  // Commands verified against package.json
  commands: {
    "npm run build": "Compile the project",
    "npm test": "Run all tests",
  },

  // Rules — three types
  rules: {
    // enforce() — backed by a linter rule, verified to exist AND be enabled
    "no-any": enforce(
      "@typescript-eslint/no-explicit-any",
      "Use unknown and narrow with type guards.",
    ),

    // check() — filesystem assertion run by vigiles
    "test-pairing": check(
      every("src/**/*.service.ts").has("{name}.test.ts"),
      "Every service must have tests.",
    ),

    // guidance() — prose only, no enforcement
    "research-first": guidance("Google unfamiliar APIs before implementing."),
  },
});

Step 3: Make the Changes

Based on what the user asked for:

Adding a rule (this absorbs the old generate-rule skill):

  • Classify the rule from the request:
    • enforce() — a linter rule can back it. Check the project's linter configs (ESLint, Ruff, Clippy, Pylint, RuboCop, Stylelint) for a matching rule; also consider an architectural tool (ast-grep, Dependency Cruiser, Steiger). If uncertain whether a rule exists, ask the user rather than guessing.
    • check() — a filesystem structural convention ("every X needs a Y"). Only for file-pairing; never for code content.
    • guidance() — can't be mechanically enforced (subjective conventions, process rules, migration context).
  • For enforce(): use the real linter rule name (e.g. eslint/no-console, @typescript-eslint/no-explicit-any, ruff/T201).
  • Add to the rules object with a kebab-case key derived from the intent, preserving alphabetical order if the existing rules are alphabetical. Import any new builders needed (e.g. check and every for the first check()).

Updating a section:

  • Edit the string in sections. Sections are plain strings or tagged template literals with file(), cmd(), ref() for verified references
  • Do NOT add # or ## headers inside sections — they break the document structure

Adding a command:

  • Add to commands. The compiler verifies it against package.json scripts.
  • Keep the description to one line (aim for 120 characters, never exceed ~200): the instruction file is loaded on EVERY request.

A pointer to a file (what used to be a "key file"):

  • ? Never add a keyFiles entry — not one, not even to a spec that already has the field. It is deprecated (vigiles lint reports it as deprecated-key-files) and removed in the next major: it compiles a file map into the instruction file loaded on every request, and the agent finds files itself.
  • Asked to add a file? Place it by the first of these that fits, and say why:
    1. the file's own header, the docs or the path already say it → add nothing;
    2. a fact about that one file → write it in the file's header comment;
    3. a rule an agent must follow while working in one folder → that folder's nested CLAUDE.md (its own <folder>/CLAUDE.md.spec.ts, compiled);
    4. only if nothing else would lead an agent there → a one-line pointer, ${file("src/services/auth.ts")} inside a prose section where the decision that needs it is written — compile verifies it exists, exactly as it verified a keyFiles path. (guidance() takes a plain string, so a path typed there is not verified.)
  • Opened a spec that still has keyFiles? Propose removing it, in the same reply: go through the entries with the same four steps (the full recipe is docs/rules/deprecated-key-files.md in the vigiles repository; a path that no longer exists is deleted) and show, per entry, where it goes and why. Where each entry goes is the user's call; apply it once they confirm.

Step 4: Compile

After editing the spec, run:

npx vigiles compile

This regenerates the compiled instruction file(s). Review the output for any errors:

  • stale-file — a file() (or deprecated keyFiles) path doesn't exist
  • stale-command — a command isn't in package.json
  • invalid-rule — a linter rule doesn't exist or is disabled
  • section-has-header — a section contains # headers (break into separate named sections)

Step 5: Verify

npx vigiles lint

If the vigiles plugin is installed (/plugin marketplace add zernie/vigiles then /plugin install vigiles@vigiles, or npx vigiles init), the PostToolUse hook recompiles automatically after you save the spec.

Important

  • Do what's asked; don't silently escalate enforcement. Add the rule the user asked for. If making it an enforce() would need a linter-config edit or a plugin install (a cost), or if it could fail a clean CI, say so and let the user choose — don't change linter config or flip on strict / workflow gating on your own. A pure win (a rule that's already enabled) you can just apply. The strengthen skill owns guidance() → enforce() upgrades.
  • Never edit CLAUDE.md or AGENTS.md directly — they have a vigiles hash comment and are build artifacts
  • The spec is TypeScript — you get type checking, autocomplete, and verified references
  • enforce() rules are verified — the compiler checks the rule exists AND is enabled in your linter config
  • Sections must not contain # or ## headers — use separate named sections instead

04 同仓库更多 Skills

zernie
zernie/vigiles

wcag-audit-patterns

Conduct WCAG 2.2 accessibility audits with automated testing, manual verification, and remediation guidance. Use when auditing websites for accessibility, fixing WCAG violations, or implementing accessible design patterns.

测试与质量
★ 15
zernie
zernie/vigiles

screen-reader-testing

Test web applications with screen readers including VoiceOver, NVDA, and JAWS. Use when validating screen reader compatibility, debugging accessibility issues, or ensuring assistive technology support.

测试与质量
★ 15
zernie
zernie/vigiles

x-research

Searches X/Twitter for real-time perspectives, dev discussions, product feedback, breaking news, and expert opinions using the X API v2. Provides search with engagement sorting, user profiles, thread fetching, watchlists, and result caching. Use when: (1) user says "x research", "search x for", "search twitter for", "what are people saying about", "what's twitter saying", "check x for", "x search", (2) user needs recent X discourse on a topic (library releases, API changes, product launches, industry events), (3) user wants to find what devs/experts/community thinks about a topic. NOT for: posting tweets or account management.

开发工程师资料检索与研究
★ 15
zernie
zernie/vigiles

wooyun-legacy

Provides web vulnerability testing methodology distilled from 88,636 real-world cases from the WooYun vulnerability database (2010-2016). Use when performing penetration testing, security audits, code reviews for security flaws, or vulnerability research. Covers SQL injection, XSS, command execution, file upload, path traversal, unauthorized access, information disclosure, and business logic flaws.

开发工程师测试与质量后端与接口
★ 15
zernie
zernie/vigiles

skill-extractor

Extracts reusable skills from work sessions. Use when: (1) a non-obvious problem was solved worth preserving, (2) a pattern was discovered that would help future sessions, (3) a workaround or debugging technique needs documentation. Manual invocation only via /skill-extractor command - no automatic triggers or hooks.

Skill与智能体开发
★ 15
zernie
zernie/vigiles

security-awareness

Teaches agents to recognize and avoid security threats during normal activity. Covers phishing detection, credential protection, domain verification, and social engineering defense. Use when building or operating agents that access email, credential vaults, web browsers, or sensitive data.

★ 15