tearitapart
Critical pre-implementation review. Find what AI breaks. Verdict: PROCEED, REVISE, or RETHINK. Triggers: review plan, tear apart, critique, analyze.
- License 许可
- Apache-2.0
- 最近更新
- 2026-11-11
- Stars
- ★ 1.6k
- Forks
- 468
01 前言 Front Matter
- name
- tearitapart
- kernel
- { "kind": "validator", "version": 1, "confirmation": "none", "side_effects": "none" }
- description
- Critical pre-implementation review. Find what AI breaks. Verdict: PROCEED, REVISE, or RETHINK. Triggers: review plan, tear apart, critique, analyze.
- allowed-tools
- Read, Bash, Grep, Glob
- user-invocable
- true
02 资源文件 2
- 参考文档reference/security-research.md15.6 KB
- 参考文档reference/security.md8.5 KB
03 SKILL.md 正文
<skill id="tearitapart">
<purpose> Pre-implementation review. Check Big 5, security, testing, architecture. Goal: find real problems, not generic concerns. </purpose>
<skill_load> Load: skills/quality/SKILL.md, skills/build/reference/testing.md, skills/tearitapart/reference/security.md Reference: skills/quality/reference/quality-research.md </skill_load>
<on_start>
agentdb read-start
</on_start>
<phase id="1_gather">
- Read plan/spec
- List files to be touched
- Check git status
- Check AgentDB for prior contracts
- Read _meta/research/ for anti-patterns
output: scope: N files tier: 1|2|3 prior_work: contracts, research found </phase>
<phase id="2_big5"> Run Big 5 checks from skills/quality/SKILL.md:
- input_validation: Zod schema? Parameterized queries?
- edge_cases: null, empty, unicode, timeout?
- error_handling: no empty catch? Logged with context?
- duplication: same logic repeated?
- complexity: functions < 30 lines?
Use quick_checks from quality skill for detection. </phase>
<phase id="3_security"> Load: skills/tearitapart/reference/security.md
critical:
- [ ] No hardcoded secrets
- [ ] Auth tokens in httpOnly cookies
- [ ] Rate limiting
- [ ] HTTPS enforced
injection:
- [ ] SQL: parameterized only
- [ ] XSS: DOMPurify
- [ ] CSRF: tokens on state changes </phase>
<phase id="4_testing"> Load: skills/build/reference/testing.md
verify:
- Tests exist BEFORE implementation?
- Edge cases covered?
- Assertions specific (not toBeTruthy)?
- Mocks at boundaries only?
red_flags:
- "Will add tests later"
- 100% coverage, weak assertions
- No error path testing </phase>
<phase id="5_architecture"> Load: skills/architecture/SKILL.md
verify:
- Follows existing patterns?
- Interface stability?
- Modular boundaries?
- Dependency direction correct? </phase>
<verdict> <PROCEED> No Big 5 violations. Security passes. Tests defined. Output: "PROCEED with caveats: [list]" </PROCEED>
<REVISE> 1-2 Big 5 violations (fixable). Missing security items. Output: "REVISE: [changes with file:line]" </REVISE>
<RETHINK> 3+ Big 5 violations. Fundamental security gaps. No tests. Output: "RETHINK: [why flawed] → [alternative]" </RETHINK>
<ask_user> Use AskUserQuestion when: verdict is REVISE or RETHINK Ask: "Verdict: {REVISE|RETHINK}. Want details on specific findings, or proceed with fixes?" Options: show details, proceed with fixes, override and proceed anyway </ask_user> </verdict>
<output_format>
Save to _meta/reviews/{feature}-teardown.md:
# Tear Down: {feature}
reviewed: {timestamp}
tier: {1|2|3}
scope: {N files}
## Big 5
input_validation: pass|fail
edge_cases: pass|fail
error_handling: pass|fail
duplication: pass|fail
complexity: pass|fail
## Verdict: PROCEED | REVISE | RETHINK
{reasoning}
## Action Items
1. {fix with file:line}
</output_format>
<on_complete>
agentdb write-end '{"command":"tearitapart","verdict":"X","big5_violations":N}'
</on_complete>
</skill>
04 同仓库更多 Skills
deja-search
deja-vu memory — search the user's past AI coding sessions with the deja CLI. Holds what they already settled and never wrote into the repo (naming rules, banned or already-tried tools, required checks before merge, preferred values, who owns what). Use before your first edit in a task, before you call a change done or ready to merge, before you recommend a tool, library, design or reviewer, before re-debugging an error that may already be solved, when they say 'didn't we fix this before', 'what did we decide about X' or 'I already have that', and before telling them something on this machine does not exist.
deja-reflect
End-of-session reflection and memory curation with deja-vu. Review what was decided, what commands broke and what repaired them, and record durable project rules or decisions with deja remember so the next session starts with them.
revid
Make, edit, export and post AI videos with Revid (revid.ai) through the Revid MCP server. Use whenever the user wants a short-form or long-form video made (from an idea, a script, a URL, an article, a PDF, a tweet, a product page, their own clips, or a song), wants to find what is going viral on TikTok, YouTube, Instagram or X before making something, wants to edit or re-export an existing Revid project, generate a standalone AI image or clip, make a series episode, or publish and schedule a finished video to connected social accounts. Covers setup (hosted MCP with OAuth, or an API key), the 36 tools, credits, polling and the rules for publishing. Routes to the more specific revid-* skills when one fits.
review-study
Review a QuestionPunk survey before launch for wording, answer choices, branching, and missing settings. Use for check my survey or review this draft before publishing.
manage-study
Find QuestionPunk studies, check status, publish an explicitly requested draft, or retrieve its participant link. Use for find my survey, publish this study, or how many people responded.
create-study
Create a saved QuestionPunk survey draft from a research brief or edit specified questions. Use for requests such as make a customer feedback survey or shorten my onboarding study.