agentic-dev-workflow

Execute a blueprint by creating a taskforce — a group of agents working in parallel on blueprint steps. Creates the workspace, assigns tasks, monitors progress, reviews completed work, and merges results. Use when the user wants to execute an existing blueprint with multiple agents. Requires a blueprint file from dev-blueprint.

Orchestrates Aspire distributed applications using the Aspire CLI for running, debugging, and managing distributed apps. USE FOR: aspire start, aspire stop, start aspire app, aspire describe, list aspire integrations, debug aspire issues, view aspire logs, add aspire resource, aspire dashboard, update aspire apphost. DO NOT USE FOR: non-Aspire .NET apps (use dotnet CLI), container-only deployments (use docker/podman), Azure deployment after local testing (use azure-deploy skill). INVOKES: Aspire CLI commands (aspire start, aspire describe, aspire otel logs, aspire docs search, aspire add), bash. FOR SINGLE OPERATIONS: Use Aspire CLI commands directly for quick resource status or doc lookups.

ALWAYS use this skill when investigating API performance, endpoint latency, or trace analysis. This skill provides the exact Aspire CLI commands and span pattern knowledge needed to diagnose N+1 queries, excessive storage reads, duplicate aggregate rehydration, and missing projections. You MUST consult this skill whenever the user mentions: slow endpoints, high latency, too many spans, N+1 patterns, storage reads, trace analysis, span counts, projection vs factory performance, before/after performance comparison, profiling requests, or asks 'why is this slow'. Even if you think you can handle it directly, this skill contains project-specific trace patterns and CLI commands you don't know without it.

Security checklist for C#/.NET backend (ASP.NET Core, EF Core, Event Sourcing). Covers secrets management, input validation, SQL injection, authentication, authorization, rate limiting, security headers, sensitive data handling, Problem Details (RFC 7807), and event sourcing security. Invoked via /dev-security (unified entry point) — not directly.

Security checklist for Angular/TypeScript frontend. Covers XSS prevention, client-side validation, secure authentication patterns, CSRF handling, content security policy, and sensitive data in bundles. Invoked via /dev-security (unified entry point) — not directly.

Test-driven development workflow for C#/.NET using xUnit, NSubstitute, and event sourcing (EventSourcing). Covers aggregate testing, specification testing, projection testing, and proper test isolation. Invoked via /dev-tdd (unified entry point) — not directly.

Test-driven development workflow for Angular/TypeScript using Vitest, @testing-library/angular, Angular TestBed, and Playwright. Targets standalone components, signals, zoneless change detection, and modern Angular control flow. Invoked via /dev-tdd (unified entry point) — not directly.

Post-change verification for C#/.NET backend code — build, Roslyn analyzers, dotnet format, xUnit tests with coverage, NuGet vulnerability scan, and diff review. Invoked via /dev-verify (unified entry point) — not directly.

Post-change verification for Angular/TypeScript frontend code — build, TypeScript type check, ESLint, unit tests with coverage, npm audit, and diff review. Invoked via /dev-verify (unified entry point) — not directly.

Unified start/watch/test workflow for Aspire apps. ALWAYS use this skill when the user says: 'start it for testing', 'start and watch', 'run the app', 'start the apphost', 'watch the app', 'monitor for errors', 'keep an eye on logs', 'start the app and watch it', 'rebuild and check', 'anything weird in the logs?', 'babysit the app', or wants ongoing telemetry monitoring while they work. This skill starts the AppHost, discovers all resources, waits for health, then continuously monitors for errors and regressions.

Install the agentic workflow into a project. Sets up context files, adopts skills, configures the docs repo connection, and adds the heartbeat to CLAUDE.md. Use when the user says "set up the workflow", "bootstrap this project", "install the workflow", or "make this project workflow-aware".

Maintains the skill catalog (catalog.json) with metadata about all installed skills. Use when adding, removing, or auditing skills. Invoke with /meta-skill-catalog to see current inventory, check for issues, or rebuild the catalog from disk.

Automates browser interactions for web testing, form filling, screenshots, and data extraction. Use when the user needs to navigate websites, interact with web pages, fill forms, take screenshots, test web applications, or extract information from web pages.

Turn a one-line objective into a step-by-step construction plan for multi-session, multi-agent projects. Each step has a self-contained context brief so a fresh agent can execute it cold. Includes adversarial review, dependency graph, and parallel step detection. Use when the user requests a plan or roadmap for a complex multi-PR task, or describes work that needs multiple sessions. Do NOT use for tasks completable in a single PR or fewer than 3 tool calls.

Write conventional commit messages following the Angular/Conventional Commits specification. Activates when creating commits, writing commit messages, or when the user asks for commit help. Analyzes git diff to generate clear, well-structured commit messages.

Audit and update NuGet packages for C#/.NET projects. Detects outdated packages, security vulnerabilities, and breaking changes. Groups updates by risk level, runs verification after each batch, and pauses for user confirmation before any major version bump or .NET framework upgrade. Invoked via /dev-dependency (unified entry point) — not directly.

Audit and update npm packages for Angular/TypeScript projects. Detects outdated packages, security vulnerabilities, and breaking changes. Groups updates by risk level, runs verification after each batch, and pauses for user confirmation before any major version bump or Angular framework upgrade. Invoked via /dev-dependency (unified entry point) — not directly.

Audit and update project dependencies. Auto-detects package managers (NuGet, npm) from the project or uses workflow.json project type. Runs both backend and frontend checks in mixed projects. Filter with "nuget" or "npm" to target one stack. Use when the user says "update dependencies", "check packages", "audit deps", "upgrade packages", or invokes /dev-dependency.

MSBuild diagnosis and optimization for .NET projects. Covers binlog analysis, incremental build fixes, common MSBuild antipatterns, and Directory.Build.props/targets organization. Referenced by dev-verification-backend and dotnet-build-resolver agent.

EF Core query optimization and best practices. Covers N+1 detection, query splitting, compiled queries, change tracking optimization, and migration strategies. Conditionally installed when project uses EF Core.

.NET version migration assistant. Guides migration between .NET versions (8→9, 9→10, 10→11), nullable reference type adoption, and AOT compatibility preparation. Provides step-by-step checklists and automated detection of breaking changes.

Pattern for progressively refining context retrieval in multi-agent workflows. Solves the sub-agent context problem where agents don't know what context they need until they start working. Dispatches broad queries, evaluates relevance, refines, and loops (max 3 cycles). Use when spawning sub-agents that need codebase context, or when a single search isn't finding what you need.

Research-before-coding workflow. Search for existing tools, packages, and patterns before writing custom code. Checks NuGet, npm, MCP servers, GitHub, and the existing codebase. Use when starting a new feature, adding a dependency, or before creating a new utility.

Security review aligned with OWASP Top 10:2025. Auto-detects backend (.NET) and frontend (Angular/TypeScript) from project files. Runs both in mixed projects. Reports findings with severity and offers to fix inline. Filter with "dotnet" or "angular" to target one stack. Use when the user says "security review", "check security", "audit security", or invokes /dev-security.

Test-driven development workflow. Auto-detects backend (.NET) and frontend (Angular/TypeScript) from project files. Loops RED→GREEN→REFACTOR cycles until 80%+ coverage is reached. Filter with "dotnet" or "angular" to target one stack. Use when the user says "TDD", "write tests first", "test-driven", or invokes /dev-tdd.

Post-change verification for the project. Auto-detects backend (.NET) and frontend (Angular/TypeScript) from project files. Runs both in mixed projects. Filter with "dotnet" or "angular" to target one stack. Reports issues and offers to fix them inline. Use when the user says "verify", "check the code", "run checks", "verify changes", or invokes /dev-verify.

Generate an Architecture Decision Record from template (MADR format). Use when the user says "record this decision", "write an ADR", "document why we chose", or after an RFC is accepted.

Generate a Design Document from template. Use when the user says "write a design doc", "technical design", "system design", or "architecture document for this feature".

Bootstrap documentation for an existing codebase by analyzing code, git history, dependencies, and project structure. Generates C4 diagrams, ADRs, domain model reference, API docs, and onboarding guide as drafts for review. Use when the user says "init docs", "generate documentation", "bootstrap docs for this project", "document this codebase", or "create initial documentation".

Generate a blameless post-mortem from template. Use when the user says "write a post-mortem", "incident report", "what went wrong", "document the outage", or after a production incident.

Generate a Product Requirements Document from template. Use when the user says "create a PRD", "write requirements", "product spec", or "define the feature".

Generate a Request for Comments document from template. Use when the user says "write an RFC", "propose a change", "technical proposal", or "I want to discuss an approach before building it".

Generate an operational runbook from template. Use when the user says "write a runbook", "create an ops guide", "incident response procedure", "how to handle [X] in production", or "document the on-call procedure for".

Generate a spike/research report from template. Use when the user says "write up the spike", "research report", "document what we found", "investigation results", or "compare options".

Review and adopt an external skill into this workflow. Evaluates a skill from a URL, marketplace, or local path for compatibility, overlap, quality, and fit within the existing skill catalog. Use when the user wants to add a new skill, says "adopt skill", "install skill", "add this skill", "evaluate this skill", or invokes /meta-adopt-skill. Does NOT trigger automatically.

Analyze session patterns and extract reusable skills, rules, or conventions. Turns recurring corrections, debugging techniques, and workarounds into permanent knowledge. Use when the user says "learn from this session", "extract patterns", "what did we learn", or at session wrap-up when significant patterns were discovered.

Package universal skill learnings from a project and contribute them back to the agentic-workflow source repo via a git branch. Creates a contrib/ branch with the adaptation details for review. Use when the user says "contribute back", "push learnings", "send adaptations upstream", or after /meta-continuous-learning flags pending contributions.

Session startup ritual that loads context files, creates daily memory, checks for stale context, and surfaces documentation status. Runs automatically at the start of every session, or invoke manually with /meta-heartbeat to re-initialize context. Does NOT trigger for mid-session work.

Review and merge skill contribution branches into main. Lists pending contrib/ branches, shows diffs, and applies changes with version bumps and changelog updates. Use when the user says "merge contributions", "review contributions", "check for skill contributions", or after /meta-contribute-back has staged changes.

Upgrade installed workflow skills and templates from the agentic-workflow repo. Version-aware: compares semver versions, shows changelogs, warns about local adaptations. Use when the user says "upgrade the workflow", "update skills", "sync skills", "check for skill updates", or after pulling a new version of agentic-workflow.